ACLs were not part of the core hbase (implemented through coprocessor). We were adding to a core functionality knowledge about an external component (ACL).
There was the discussion about the meaning of restoring the acls that we snapshotted (see HBASE-11013).
Please consult with the following for up-to-date ACL:
http://hbase.apache.org/book.html#appendix_acl_matrix
We cannot allow any user to restore any snapshot otherwise you'll be able to see data that is not yours.
There is no ACL on snapshot to say "allow this user to restore/clone" the snapshot.