make effective acl consistent KIKIMR-14472

ref:d0e369a4b02f28c78084bd681cbd040ccf62484c

1 files changed, 1 insertions, 1 deletions

diff --git a/ydb/core/tx/schemeshard/schemeshard__init_root.cpp b/ydb/core/tx/schemeshard/schemeshard__init_root.cpp
index 7085c109a3d..cb908996c79 100644
--- a/ydb/core/tx/schemeshard/schemeshard__init_root.cpp
+++ b/ydb/core/tx/schemeshard/schemeshard__init_root.cpp
@@ -107,7 +107,6 @@ struct TSchemeShard::TTxInitRoot : public TSchemeShard::TRwTxBase {
         newPath->PathType = TPathElement::EPathType::EPathTypeDir;
         newPath->DirAlterVersion = 1;
         newPath->UserAttrs->AlterVersion = 1;
-        newPath->CachedEffectiveACL.Init(newPath->ACL);
         Self->PathsById[Self->RootPathId()] = newPath;
         Self->NextLocalPathId = Self->RootPathId().LocalPathId + 1;
         Self->NextLocalShardIdx = 1;
@@ -125,6 +124,7 @@ struct TSchemeShard::TTxInitRoot : public TSchemeShard::TRwTxBase {
             diffAcl.AddAccess(ace);
         }
         newPath->ApplyACL(diffAcl.SerializeAsString());
+        newPath->CachedEffectiveACL.Init(newPath->ACL);
         newDomain->UpdateSecurityState(Self->LoginProvider.GetSecurityState());
 
         Self->PersistUserAttributes(db, Self->RootPathId(), nullptr, newPath->UserAttrs);