[Zeppelin-661] Add a documentation for Shiro authentication

[AhyoungRyu]

What is this PR for?

About a month ago, Shiro authentication for Zeppelin is merged by #586. Even though we already have SECURITY-README.md, many people do not know about the existence of this file. So I wrote a docs based on SECURITY-README.md to the Zeppelin documentation website to guide step by step for Zeppelin users.

What type of PR is it?

Documentation

Todos

• - Add shiro authentication docs
• - Add zeppelin.anonymous.allowed property in zeppelin-site.md
• - Indent Websocket security section in SECURITY-README.md

Is there a relevant Jira issue?

ZEPPELIN-661

How should this be tested?

Screenshots (if appropriate)

Questions:

• Does the licenses files need update? No
• Is there breaking changes for older versions? No
• Does this needs documentation? No

[felixcheung]

Could you add by default what is the settings Zeppelin would use? (anon)

[felixcheung]

looks good @hayssams could you review?

[AhyoungRyu]

@felixcheung Thanks for the quick review! I addressed the default status of anon and authcBasic as you said.

[Leemoonsoo]

Looks great. Thanks @AhyoungRyu for the nice document.

[AhyoungRyu]

@Leemoonsoo My pleasure : )

[hayssams]

LGTM
Great doc. Thanks

[felixcheung]

merging if no more comments

[minahlee]

@felixcheung Could you also build the docs and deploy them after you merge the PRs which includes docs changes? So the updated docs can be reflected to website. You can refer https://github.com/apache/incubator-zeppelin/blob/master/docs/README.md

[AhyoungRyu]

+1 for @minahlee

[minahlee]

@felixcheung FYI, I just deployed the latest documentation on website.

[felixcheung]

thanks, I was not aware of that process. Could you give me permission to add to https://cwiki.apache.org/confluence/display/ZEPPELIN/Committer+Guide

[Leemoonsoo]

@felixcheung Permission granted. Sorry i forgot adding your id to cwiki.