Comment 5 for bug 1541122

The oozie backend will be deployed into a tenant network that is specified when the cluster is created. In this respect the oozie node is accessible to anyone who can access that network, this is *not* on the control plane.

So, any user who is part of the project that contains a sahara cluster with an oozie node would, theoretically, be able to access the oozie mysql instance.