Uploaded image for project: 'ZooKeeper'
  1. ZooKeeper
  2. ZOOKEEPER-2591

The deletion of Container znode doesn't check ACL delete permission

    XMLWordPrintableJSON

    Details

      Description

      Container nodes check the ACL before creation, but the deletion doesn't check the ACL rights. The code below succeeds even tough we removed ACL access permissions for "/a".

              zk.create("/a", null, Ids.OPEN_ACL_UNSAFE, CreateMode.CONTAINER);
              ArrayList<ACL> list = new ArrayList<>();
              list.add(new ACL(0, Ids.ANYONE_ID_UNSAFE));
              zk.setACL("/", list, -1);
      
              zk.delete("/a", -1);
      

        Attachments

          Activity

            People

            • Assignee:
              eribeiro Edward Ribeiro
              Reporter:
              eribeiro Edward Ribeiro
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: