Uploaded image for project: 'Zeppelin'
  1. Zeppelin
  2. ZEPPELIN-3646

Previous permissions are not effective and Notes are visible to everyone after upgrade

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.8.0
    • Fix Version/s: 0.8.2
    • Component/s: security
    • Labels:
      None

      Description

      Hi,

      I followed the upgrade guide by copying notebook and conf directories into the new Zeppelin 0.8 directory, however right after starting the new Zeppelin, all the users can see all the existing Notes. (I followed the same process before without a problem in 0.7.x)

      I can confirm the permissions exist by looking at the file or by opening someone else's Note and check the permissions.

      I can start the old Zeppelin 0.7.3 and the permissions will be restored to normal as expected. I don't understand why it fails to hide the Notes which user doesn't have permission to READ in 0.8.0.

      The ZEPPELIN_NOTEBOOK_PUBLIC and zeppelin.notebook.public is set to false, but I guess configs should not be an issue since it works in 0.7.3 and not in 0.8.0 as it looks to me the reading permissions might be different in 0.8.0.

      Let me know if you need config/log details.

      Thank you.

        Attachments

          Activity

            People

            • Assignee:
              egorklimov George Klimov
              Reporter:
              maziyar Maziyar PANAHI
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h 40m
                1h 40m