Github user zjffdu commented on the issue:
https://github.com/apache/zeppelin/pull/2925
@mebelousov Currently I would only allow note owner to set the schedule and
run cron job via the owner. But seems zeppelin allow multiple owners for one
note (it doesn't make sense to me), this is only what I can do the eliminate
the security issue. ---
