Github user kjmrknsn commented on the issue:

    https://github.com/apache/zeppelin/pull/2676
  
    @felixcheung I'm managing Zeppelin with a Hadoop cluster which data access 
control is introduced to via Apache Ranger because my company needs to control 
each data access to our Hadoop cluster strictly. I found only the following 2 
security issues about the Zeppelin cron scheduler: 
    
    1. https://github.com/apache/zeppelin/pull/2671
    2. https://github.com/apache/zeppelin/pull/2676 (This PR)
    
    In my opinion, it's enough to fix these 2 issues instead of reconsider the 
whole access control of Zeppelin.


---

Reply via email to