[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2595?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

neha updated ZOOKEEPER-2595:
----------------------------
    Description: 
user1 sets ACL on one znode for user 2
example :
create /xyz data sasl:user2/x...@xyz.com:cdr


now user3 can login to zkCli and delete /xyz if it has no children nodes, even 
when it does not have access

  was:
user1 sets ACL on one znode for user 2
example :
<code>
create /xyz data sasl:user2/x...@xyz.com:cdr
</code>

now user3 can login to zkCli and delete /xyz if it has no children nodes, even 
when it does not have access


> znode created with acl enabled on it can be deleted by any unauthorised user, 
> when it has no child znodes
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: ZOOKEEPER-2595
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2595
>             Project: ZooKeeper
>          Issue Type: Bug
>            Reporter: neha
>
> user1 sets ACL on one znode for user 2
> example :
> create /xyz data sasl:user2/x...@xyz.com:cdr
> now user3 can login to zkCli and delete /xyz if it has no children nodes, 
> even when it does not have access



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to