[ZOOKEEPER-2595] znode created with acl enabled on it can be deleted by any unauthorised user, when it has no child znodes

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Neha Bathra
• Created: 20/Sep/16 13:13
• Updated: 20/Sep/16 13:15

Description

user1 sets ACL on one znode for user 2
example :
create /xyz data sasl:user2/[e-mail]:cdr

now user3 can login to zkCli and delete /xyz if it has no children nodes, even when it does not have access