GitHub user zjffdu opened a pull request:
https://github.com/apache/zeppelin/pull/2914
[ZEPPELIN-3350] Don't allow set cronExecutionUser
### What is this PR for?
This PR just does a quick fix this security issue.
1. Remove the setting cron user in frontend
2. Run the note via owner.
### What type of PR is it?
[Bug Fix ]
### Todos
* [ ] - Task
### What is the Jira issue?
* https://issues.apache.org/jira/browse/ZEPPELIN-3350
### How should this be tested?
* Manually tested
### Screenshots (if appropriate)

### Questions:
* Does the licenses files need update? No
* Is there breaking changes for older versions? No
* Does this needs documentation? No
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/zjffdu/zeppelin ZEPPELIN-3350
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/zeppelin/pull/2914.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #2914
----
commit 805bffad10bc60bca613101953cc4ecefa72cf14
Author: Jeff Zhang <zjffdu@...>
Date: 2018-04-04T10:13:06Z
[ZEPPELIN-3350] Don't allow set cronExecutionUser
----
---