tree 198966ab09e42f50045b841d91db3b405b0161d0
parent f600e07864b15403a5d627fd3a633c5e4c7e3f24
author Mike Wallace <mikewallace@apache.org> 1410347670 +0100
committer Mike Wallace <mikewallace@apache.org> 1410347866 +0100

Teach fabric_util:get_db/2 about maintenance mode

If the node servicing a request does not have a shard for the db
involved then fabric_util:get_db/2 can return a shard from a node
which is in maintenance mode. If that node is a replacement node
that has not yet been brought into the cluster then the security
object will be empty.

Because fabric:get_security/2 calls fabric_util:get_db/2 and is in
the code path for authorizing requests at the HTTP layer, this can
result in live nodes returning 403s.

This commit replaces an rpc:call/4 with a rexi:cast/4 and adds
a new rpc endpoint in fabric_rpc for opening single shards. This
uses set_io_priority which will reply with a rexi_EXIT if
maintenance mode is set.

Closes COUCHDB-2325