[jira] [Created] (ZEPPELIN-2929) ZeppelinContext run methods execute paragraphs as the anonymous user

2017-09-13 Thread Luis Angel Vicente Sanchez (JIRA)
Luis Angel Vicente Sanchez created ZEPPELIN-2929:


 Summary: ZeppelinContext run methods execute paragraphs as the 
anonymous user
 Key: ZEPPELIN-2929
 URL: https://issues.apache.org/jira/browse/ZEPPELIN-2929
 Project: Zeppelin
  Issue Type: Bug
Reporter: Luis Angel Vicente Sanchez


If you set ZEPPELIN_ANONYMOUS_ALLOWED to false and you set the permissions of a 
notebook, you get a ForbiddenException if you try to run on paragraph from 
another of the same notebook  using any form of the run method, i.e. 
z.run(paragraphIndex) or z.run(parapgrahId). In both cases, the user that is 
trying to run the remote paragraph is the anonymous user and not the user 
running the current paragraph.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)


[jira] [Created] (ZEPPELIN-2900) GetUserList.getUserList leaks JdbcRealm connections

2017-09-04 Thread Luis Angel Vicente Sanchez (JIRA)
Luis Angel Vicente Sanchez created ZEPPELIN-2900:


 Summary: GetUserList.getUserList leaks JdbcRealm connections
 Key: ZEPPELIN-2900
 URL: https://issues.apache.org/jira/browse/ZEPPELIN-2900
 Project: Zeppelin
  Issue Type: Bug
Reporter: Luis Angel Vicente Sanchez
Priority: Critical


[GetUserList.java#241|https://github.com/apache/zeppelin/blob/d6203c51ed9eef5e616090326d3dd6dddf21216a/zeppelin-server/src/main/java/org/apache/zeppelin/rest/GetUserList.java#L241]
 is not closing the connections that it borrows from the datasource, preventing 
them to be returned to the connection pool (if one is used)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)