GitHub user zjffdu opened a pull request:

    https://github.com/apache/zeppelin/pull/2914

    [ZEPPELIN-3350] Don't allow set cronExecutionUser

    ### What is this PR for?
    This PR just does a quick fix this security issue. 
    1. Remove the setting cron user in frontend
    2. Run the note via owner.
    
    
    ### What type of PR is it?
    [Bug Fix ]
    
    ### Todos
    * [ ] - Task
    
    ### What is the Jira issue?
    * https://issues.apache.org/jira/browse/ZEPPELIN-3350
    
    ### How should this be tested?
    * Manually tested
    
    ### Screenshots (if appropriate)
    ![screen shot 2018-04-09 at 3 04 06 
pm](https://user-images.githubusercontent.com/164491/38483974-707dca56-3c07-11e8-918a-cd47ed94ee99.png)
    
    ### Questions:
    * Does the licenses files need update? No
    * Is there breaking changes for older versions? No
    * Does this needs documentation? No


You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/zjffdu/zeppelin ZEPPELIN-3350

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/zeppelin/pull/2914.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #2914
    
----
commit 805bffad10bc60bca613101953cc4ecefa72cf14
Author: Jeff Zhang <zjffdu@...>
Date:   2018-04-04T10:13:06Z

    [ZEPPELIN-3350] Don't allow set cronExecutionUser

----


---

Reply via email to