Details
Description
Readers of a note change change the interpreter binding of the note. This should not be possible.
To reproduce:
- Create a note with a particular user account, say user1
- Open the 'interpreter binding' options and ensure that a few are selected
- Using the note permissions dialog, make user1 the only owner and writer of that note, with the 'Readers' field blank
- Log into Zeppelin as another user, say user2
- Open the note created in step1 and uncheck (remove) one ore more interpreters
- Click Save
- Check the note interpreter binding using user1 account
You'll see that the interpreter bindings have been changed by the note reader user2