Browse Source

HUE-8087 [notebook] User with least privileges can access notebook app via URL

Roohi 7 years ago
parent
commit
447c847
1 changed files with 1 additions and 1 deletions
  1. 1 1
      desktop/libs/notebook/src/notebook/views.py

+ 1 - 1
desktop/libs/notebook/src/notebook/views.py

@@ -66,7 +66,7 @@ def notebooks(request):
 
 @check_document_access_permission()
 def notebook(request, is_embeddable=False):
-  if not SHOW_NOTEBOOKS.get():
+  if not SHOW_NOTEBOOKS.get() or not request.user.has_hue_permission(action="access", app='notebook'):
     return serve_403_error(request)
 
   notebook_id = request.GET.get('notebook', request.GET.get('editor'))