Ticket #486 (closed task: fixed)
Investigate throttling users based on connections.
| Reported by: | jmoore | Owned by: | jmoore |
|---|---|---|---|
| Priority: | critical | Milestone: | 3.0-Beta3 |
| Component: | Security | Version: | 3.0-Beta1 |
| Keywords: | Cc: |
Description
With a default postgres connection limit of about 100, it doesn't take too much (or too many threads) for a single user to DoS the server (e.g. trying to generate 100 thumbnails ASAP would do it)
During SecuritySystem.login() various checks could be performed. The question is: block or throw (and what exception)?
Change History
Note: See
TracTickets for help on using
tickets.
