All notebooks are listed when upgrade zeppelin 0.7 to 0.9

When I upgraded zeppelin 0.7 to 0.9, all notebooks are listed all users even if public option was disabled.

I found that runner permission is added but existed notebooks were not have that permission so that permission set blank. I also found that if user get runner permission, user can access notebook.

Is this right policy? I think that notebook only can be accessed by user who has reader or owner or admin. Not user who has only runner or writer.