diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 4 | ||||
| -rw-r--r-- | docs/example.toml | 3 |
2 files changed, 5 insertions, 2 deletions
diff --git a/docs/access.md b/docs/access.md index 2ef94d3..034b9fa 100644 --- a/docs/access.md +++ b/docs/access.md @@ -269,7 +269,9 @@ those through the API alike: one every node would refuse is rolled back, never written, and the request refused (`403`, saying why). A rollback costs a copy of the document, so a user with more than ten such writes within a minute (`--refused-writes-per-minute`) has its writes answered `429`, untried, until the -oldest leave the minute. So a write the API's checks let +oldest leave the minute; and past six times as many on the node in all, so does every +user with one refused within the minute (users none of whose writes were refused write +on). So a write the API's checks let through (they look at the path asked for, the rules at everything the change does) can't cut its node off. diff --git a/docs/example.toml b/docs/example.toml index 010968a..82ba016 100644 --- a/docs/example.toml +++ b/docs/example.toml @@ -106,7 +106,8 @@ htpasswd = "/etc/continuum/htpasswd" # key-logins-per-user = 100 # Writes a user may have refused within a minute because every node would refuse them -# (docs/access.md); past it, its writes are answered 429 untried for a while. Each +# (docs/access.md); past it, its writes are answered 429 untried for a while, and past +# six times as many on the node in all, those of every user with one refused. Each # refusal costs a copy of the document. # refused-writes-per-minute = 10 |