neha created ZOOKEEPER-2595:
-------------------------------

             Summary: znode created with acl enabled on it can be deleted by 
any unauthorised user, when it has no child znodes
                 Key: ZOOKEEPER-2595
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2595
             Project: ZooKeeper
          Issue Type: Bug
            Reporter: neha


user1 sets ACL on one znode for user 2
example :
<code>
create /xyz data sasl:user2/x...@xyz.com:cdr
</code>

now user3 can login to zkCli and delete /xyz if it has no children nodes, even 
when it does not have access



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to