[zeppelin] branch master updated: [ZEPPELIN-4026] document anonymous access

[fe...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

felixcheung pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git


The following commit(s) were added to refs/heads/master by this push:
     new 05fdfe5  [ZEPPELIN-4026] document anonymous access
05fdfe5 is described below

commit 05fdfe5162bb9f38eb927fc68d754370b316a133
Author: Felix Cheung <fe...@users.noreply.github.com>
AuthorDate: Sun Mar 3 23:42:11 2019 -0500

    [ZEPPELIN-4026] document anonymous access
    
    ### What is this PR for?
    doc update
    
    ### What type of PR is it?
    [Documentation]
    
    ### What is the Jira issue?
    https://issues.apache.org/jira/browse/ZEPPELIN-4026
    
    ### Questions:
    * Does the licenses files need update? N
    * Is there breaking changes for older versions? N
    * Does this needs documentation? N
---
 docs/setup/security/shiro_authentication.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/docs/setup/security/shiro_authentication.md b/docs/setup/security/shiro_authentication.md
index c9bf905..40b6e53 100644
--- a/docs/setup/security/shiro_authentication.md
+++ b/docs/setup/security/shiro_authentication.md
@@ -28,6 +28,9 @@ limitations under the License.
 
 When you connect to Apache Zeppelin, you will be asked to enter your credentials. Once you logged in, then you have access to all notes including other user's notes.
 
+## Important Note
+By default, Zeppelin allows anonymous access. It is strongly recommended that you consider setting up Apache Shiro for authentication (as described in this document, see 2 Secure the Websocket channel), or only deploy and use Zeppelin in a secured and trusted environment.
+
 ## Security Setup
 You can setup **Zeppelin notebook authentication** in some simple steps.