[jira] [Created] (ZEPPELIN-945) Notebook - User - Interpreter authorization

["Partha Pratim Ghosh (JIRA)" <ji...@apache.org>]

Partha Pratim Ghosh created ZEPPELIN-945:
--------------------------------------------

             Summary: Notebook - User - Interpreter authorization
                 Key: ZEPPELIN-945
                 URL: https://issues.apache.org/jira/browse/ZEPPELIN-945
             Project: Zeppelin
          Issue Type: Bug
            Reporter: Partha Pratim Ghosh


In Zeppelin there is notebook to interpreter mapping. However, with authentication and authorization coming in not all users may be intended to have access to all interpreters. So, we may need a user to interpreter authorization too in order to run this in a controlled environment.

Situation like the following may crop up - 

Notebook Note-A may be shared with users user1 and user2
Notebook Note-A may have hive, spark and shell interpreters
It may be intended that user1 have access to execute hive and spark interpreters 
and 
user2 may be intended to use hive, spark and shell interpreters

Currently, as I understand, there is no design to support this case.

I propose the following - 

1. Notebook to interpreter mapping - let it remain as it is
2. User to interpreter mapping - This should be saved somewhere and checked during paragraph run and appropriate message shown. 

So, if a user does not have access to an interpreter then he would not be able to execute a command with that interpreter.

If you have some alternate proposal then please share.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)