title: Zeppelin with Shiro backed permissions to create/modify notebooks
body: <p>How do I specify role permissions on Shiro so that only the <code>admin</code> role/user can create and modify notebooks and the <code>client</code> role/user has only read permissions?</p>
  
  <p>I know that I can specify per notebook permissions but:</p>
  
  <ul>
  <li><p>I'd have to manually add all <code>client</code> users to reader-only in every notebook created by <code>admin</code> users. Too much trouble, at best I could create a single <code>client</code> user, but I'd still have to include it in every notebook permission manually.</p></li>
  <li><p>Even if I take the time to do as above, I don't know how to prevent <code>client</code> users (or the <code>client</code> user) from creating notebooks.</p></li>
  </ul>