Since NXP-19283 in certain condition we may lose an ACL recursive indexing command, the result is that the children documents are not reindexed with the new ACL.
This involves setting rights on a container and to follow a workflow transition in the same transaction.
So far I can not reproduce the problem in unit test but the problem has been seen and is related to NXP-19283 changeset (7.10-HF08).