v.25.10Improvement
Add config keeper_server
Add config keeper_server.coordination_settings.check_node_acl_on_remove. If enabled, before each delete of a node, ACLs of both the node itself and parent node will be verified. Otherwise, only the ACL of the parent node will be verified. #88513 (Antonio Andelic).Why it matters
This feature allows more granular access control by verifying ACLs on both the node being deleted and its parent node, rather than only on the parent node. It enhances security by ensuring that delete operations comply with node-specific ACLs.How to use it
Enable the feature by settingkeeper_server.coordination_settings.check_node_acl_on_remove to true in the Keeper server configuration. This will make the server verify ACLs of both the target node and its parent node before allowing a node delete operation.