[ZEPPELIN-3168] Add Interpreter Settings Authorization feature

• Type: Improvement
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Nelson Costa
• Reporter: Nelson Costa
• Created: 15/Jan/18 11:17
• Updated: 06/Jul/18 04:26

Description

As a Zeppelin admin user, I want to control who can/cannot edit the interpreter settings in a particular Zeppelin instance.
Taking a similar approach to "Notebook Authorization", we should include logic in the interpreter settings code so we have more control on what users are allowed or not to change.

Initial requirements:

• Should validate updates (UI -> REST API -> Validate)
• Should integrate with Shiro (via SecurityUtils)
• Persistence in conf/interpreter.json file

Given your experience moon, zjffdu, felixcheung, please let me know any initial feedback you have on this. Thanks!

 

Issue Links

• links to: GitHub Pull Request #2742