[ZEPPELIN-1718] Should prevent to set note permission by anonymous user

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.6.2
• Fix Version/s: 0.7.0
• Assignee: Ahyoung Ryu
• Reporter: Ahyoung Ryu
• Created: 28/Nov/16 10:29
• Updated: 23/Apr/18 07:48
• Resolved: 28/Dec/16 03:24

Description

Currently anonymous user can do something in note permission setting page.

e.g. the anonymous user can type "admin" / "user1" to the permission setting fields since we don't check the user's principal for this.

It doesn't make sense actually. At least we should disallow the non-authenticated users by deactivating those permission related features i think.

Issue Links

• links to: GitHub Pull Request #1694