seung-00 commented on PR #5060:
URL: https://github.com/apache/zeppelin/pull/5060#issuecomment-3261954665

   I’ve updated according to the review comments.
   But I found one issue: the configurations WS API has no auth check, while 
the REST API does. So users without permission can still access the configs via 
WS.
   
   Removing WS right now would break things, so I’ll fix this in another PR 
before merging this one.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscr...@zeppelin.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to