Andrew X created ZEPPELIN-3176:
----------------------------------
Summary: Interpreter binding for a note can be changed by readers
of that note
Key: ZEPPELIN-3176
URL: https://issues.apache.org/jira/browse/ZEPPELIN-3176
Project: Zeppelin
Issue Type: Bug
Components: front-end
Affects Versions: 0.7.3
Environment: Docker deployment of Zeppelin 0.7.3 (docker hub:
apache/zeppelin:0.7.3)
Reporter: Andrew X
Readers of a note change change the interpreter binding of the note. This
should not be possible.
To reproduce:
# Create a note with a particular user account, say user1
# Open the 'interpreter binding' options and ensure that a few are selected
# Using the note permissions dialog, make user1 the only owner and writer of
that note, with the 'Readers' field blank
# Log into Zeppelin as another user, say user2
# Open the note created in step1 and uncheck (remove) one ore more interpreters
# Click Save
# Check the note interpreter binding using user1 account
You'll see that the interpreter bindings have been changed by the note reader
user2
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
