Keiji Yoshida created ZEPPELIN-3048:
---------------------------------------
Summary: Add the option which prevents paragraphs from being
edited while their notebook is cron scheduled
Key: ZEPPELIN-3048
URL: https://issues.apache.org/jira/browse/ZEPPELIN-3048
Project: Zeppelin
Issue Type: Improvement
Reporter: Keiji Yoshida
Assignee: Keiji Yoshida
Add the option which prevents paragraphs from being edited while their notebook
is cron scheduled.
Now, the cron scheduled notebook's paragraphs can be edited by users who have
the "writer" authority. That could cause a security issue when the Hadoop
cluster has data access control (managed by Apache Ranger and so forth) because
the "writer" users can abuse the access right of the "cron executing user" and
can access the data which they ordinary cannot access by updating the
paragraphs whose notebook is cron scheduled and its cron executing user is set
to other users.
Thus, under the circumstances strict data access control is required, it is
necessary to add the option to Zeppelin, that prevents paragraphs from being
edited while their notebook is cron scheduled.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
