You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@openwhisk.apache.org by OpenWhisk Team Slack <ra...@apache.org> on 2019/05/14 07:52:08 UTC
[slack-digest] [2019-05-13] #random
2019-05-13 03:31:37 UTC - Jin Choi: is the `block` command in wskadmin effective? I blocked myself with the tool for a test. And yet I still can do whatever as if I am not blocked.
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557718297021600
----
2019-05-13 04:11:19 UTC - Jin Choi: what I mean by 'I still can do whatever' includes issuing commands such as `wsk list` and `wsk action invoke some_action`
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557720679023200
----
2019-05-13 14:51:19 UTC - Robert Horvick: I’ve been trying to chase down how a block status would be picked up by the invoker and I’m not seeing it. I would have thought at some level like authorizeAndDispatch or even in the action invoker itself. If it is there, I’d love a pointer to what I’m missing.
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557759079024600
----
2019-05-13 17:41:04 UTC - Rodric Rabbah: a blocked user should not pass A&A in the controller (once the identity is refreshed, which i think has a grace period of 5 minutes (<https://github.com/apache/incubator-openwhisk/blob/536ce94af92a9b72ae1b82b16242d2c8177478b0/common/scala/src/main/scala/org/apache/openwhisk/core/database/MultipleReadersSingleWriterCache.scala#L454-L457>)
the invoker checks for black listed identities separately by polling the database <https://github.com/apache/incubator-openwhisk/blob/6982f460c293214928f4b62b2572d6bd83d61a4e/core/invoker/src/main/scala/org/apache/openwhisk/core/invoker/InvokerReactive.scala#L118-L124>
+1 : Jin Choi
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557769264026100
----
2019-05-13 18:04:42 UTC - Robert Horvick: Ah - I was tracing through the code looking for the words block/blocked. Should have thought to use blacklist as well.
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557770682027100
----
2019-05-13 18:06:31 UTC - Robert Horvick: The blacklist check then gets done in processActivationMessage - makes sense. Thanks for the pointers to the right areas.
+1 : Rodric Rabbah, Jin Choi
https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557770791027700
----