registry team mailing list archive

[gholt <665383@xxxxxxxxxxxxxxxxxx>]

We talked more on this yesterday and I thought I'd update what we came
up with so far:

- There should be an option to turn off account puts/deletes in the
proxy for those that want to completely avoid any potential attack
vector.

- The account delete should simply mark the account as suspended (status
= SUSPENDED), allowing no access to the account's data.

- The account reaper should delete suspended accounts after a
configurable amount of time (1 week default?). As soon as it starts the
deletion process it should set status = DELETED.

- Maybe provide a way to resurrect a suspended account or even a deleted
account. But this is low priority as it could be done manually in such
an uncommon situation (shut of the reapers, manually update the 3
account databases).

-- 
Add an interface to the Proxy to delete accounts
https://bugs.launchpad.net/bugs/665383
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack Object Storage (swift).