Re: shiro.ini : Zeppelin interpreter authorization: lock to one user

2017-04-21 Thread Vinay Shukla
Arun, Can you try the following 1. Enable Zeppelin authentication via shiro if not already. 2. In shiro.ini specify the role that should have access to interpreter settings page. Example below [urls] /api/interpreter/** = authc, roles[admin] /api/configurations/** = authc, roles[admin] /api/c

Re: shiro.ini : Zeppelin interpreter authorization: lock to one user

2017-04-20 Thread moon soo Lee
Hi, https://issues.apache.org/jira/browse/ZEPPELIN-2236 tracks restricting interpreter setting to admin group. And we're trying to solve this problem in 0.8.0 [1]. Please keep an eye on this issue and feel free to make any contributions. Thanks, moon [1] https://lists.apache.org/thread.html/f4be

Re: shiro.ini : Zeppelin interpreter authorization: lock to one user

2017-04-12 Thread Arun Khetarpal
Hi - I think the ask is that currently it seems that activeDirectoryGroupRealm maps each active directory group to a shiro role. Later we can authorize urls with roles in our urls section of shiro file. Our problem is that we don't really have an admin group handy in our AD - due to which there i

shiro.ini : Zeppelin interpreter authorization: lock to one user

2017-04-12 Thread Vartul Gupta
Hi Team, I am trying to setup authentication and authorization for Zeppelin using Shiro file. Now my question is How we can set Zeppelin interpreter settings to be restricted to a particular AD admin user. Here is the sample of my shiro file . [main] activeDirectoryRealm = org.apache.zeppelin.