Jeff Hammel created ZEPPELIN-5025:
-------------------------------------

             Summary: security issues: blank lists in 
notebook-authorization.json open up access to all users
                 Key: ZEPPELIN-5025
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-5025
             Project: Zeppelin
          Issue Type: Improvement
    Affects Versions: 0.9.0
            Reporter: Jeff Hammel


If the user accidentally leaves the field blank or is unaware of this 
requirement, leave the field blank will cause the notebook to be shared 
automatically with other users in the system until the user has been aware of 
this action.
We suggest to do the following:
1. For sharing with all users, field cannot remain blank, but instead user must 
input "*" in the field



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to