We talked more on this yesterday and I thought I'd update what we came up with so far:
- There should be an option to turn off account puts/deletes in the proxy for those that want to completely avoid any potential attack vector. - The account delete should simply mark the account as suspended (status = SUSPENDED), allowing no access to the account's data. - The account reaper should delete suspended accounts after a configurable amount of time (1 week default?). As soon as it starts the deletion process it should set status = DELETED. - Maybe provide a way to resurrect a suspended account or even a deleted account. But this is low priority as it could be done manually in such an uncommon situation (shut of the reapers, manually update the 3 account databases). -- Add an interface to the Proxy to delete accounts https://bugs.launchpad.net/bugs/665383 You received this bug notification because you are a member of Registry Administrators, which is subscribed to OpenStack Object Storage (swift). _______________________________________________ Mailing list: https://launchpad.net/~registry Post to : registry@lists.launchpad.net Unsubscribe : https://launchpad.net/~registry More help : https://help.launchpad.net/ListHelp
