Tagar commented on issue #3263: ZEPPELIN-3907. Add code statement into Spark 
JobGroup Id for SparkInterpreter
URL: https://github.com/apache/zeppelin/pull/3263#issuecomment-458275316
 
 
   > While this is a really nice feature to have, it does introduce some risk 
of information leakage in an organization. Take for example `select * from 
tableofsecrets where secretcolumn = 'supersecret'`.
   > What about adding a configuration parameter for activating this feature?
   
   That's a good point. 
   
   Although I think it's possible to lock down Spark Driver UI through 
`spark.ui.filters`?
   
   Also it might be possible to redact out passwords and other sensitive 
information in Zeppelin - something similar to `spark.redaction.regex`.
   
   Maybe this change should be an option and off by default?
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


With regards,
Apache Git Services

Reply via email to