upgle commented on code in PR #5229:
URL: https://github.com/apache/openwhisk/pull/5229#discussion_r867598703


##########
core/invoker/src/main/scala/org/apache/openwhisk/core/invoker/InvokerReactive.scala:
##########
@@ -179,6 +178,8 @@ class InvokerReactive(
     WhiskAction
       .get(entityStore, actionid.id, actionid.rev, fromCache = actionid.rev != 
DocRevision.empty)
       .flatMap(action => {
+        // action that exceed the system limit cannot be executed.
+        action.limits.checkSystemLimits()

Review Comment:
   @jiangpengcheng The code you shared is for checking the limit when 
**creating an action**.
   In order to prevent execution by malicious modifications such as DB 
alteration, the invoker side verifies once more **before invoking an action**.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to