2019-05-13 03:31:37 UTC - Jin Choi: is the `block` command in wskadmin effective? I blocked myself with the tool for a test. And yet I still can do whatever as if I am not blocked. https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557718297021600 ---- 2019-05-13 04:11:19 UTC - Jin Choi: what I mean by 'I still can do whatever' includes issuing commands such as `wsk list` and `wsk action invoke some_action` https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557720679023200 ---- 2019-05-13 14:51:19 UTC - Robert Horvick: I’ve been trying to chase down how a block status would be picked up by the invoker and I’m not seeing it. I would have thought at some level like authorizeAndDispatch or even in the action invoker itself. If it is there, I’d love a pointer to what I’m missing. https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557759079024600 ---- 2019-05-13 17:41:04 UTC - Rodric Rabbah: a blocked user should not pass A&A in the controller (once the identity is refreshed, which i think has a grace period of 5 minutes (<https://github.com/apache/incubator-openwhisk/blob/536ce94af92a9b72ae1b82b16242d2c8177478b0/common/scala/src/main/scala/org/apache/openwhisk/core/database/MultipleReadersSingleWriterCache.scala#L454-L457>)
the invoker checks for black listed identities separately by polling the database <https://github.com/apache/incubator-openwhisk/blob/6982f460c293214928f4b62b2572d6bd83d61a4e/core/invoker/src/main/scala/org/apache/openwhisk/core/invoker/InvokerReactive.scala#L118-L124> +1 : Jin Choi https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557769264026100 ---- 2019-05-13 18:04:42 UTC - Robert Horvick: Ah - I was tracing through the code looking for the words block/blocked. Should have thought to use blacklist as well. https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557770682027100 ---- 2019-05-13 18:06:31 UTC - Robert Horvick: The blacklist check then gets done in processActivationMessage - makes sense. Thanks for the pointers to the right areas. +1 : Rodric Rabbah, Jin Choi https://openwhisk-team.slack.com/archives/C3UDXSFA6/p1557770791027700 ----
