More security: don't delete stuff too easily

2 files changed, 9 insertions, 1 deletions

diff --git a/src/table/replication/fullcopy.rs b/src/table/replication/fullcopy.rs
index a20f20b7..a5faece9 100644
--- a/src/table/replication/fullcopy.rs
+++ b/src/table/replication/fullcopy.rs
@@ -41,7 +41,12 @@ impl TableReplication for TableFullReplication {
 		self.replication_nodes(hash, system.ring.borrow().as_ref())
 	}
 	fn write_quorum(&self, system: &System) -> usize {
-		system.ring.borrow().config.members.len() - self.max_faults
+		let nmembers = system.ring.borrow().config.members.len();
+		if nmembers > self.max_faults {
+			nmembers - self.max_faults
+		} else {
+			1
+		}
 	}
 	fn max_write_errors(&self) -> usize {
 		self.max_faults
diff --git a/src/table/sync.rs b/src/table/sync.rs
index b5044a4e..f8ebb2f0 100644
--- a/src/table/sync.rs
+++ b/src/table/sync.rs
@@ -277,6 +277,9 @@ where
 					warn!("Interrupting offload as partitions seem to have changed");
 					break;
 				}
+				if nodes.len() < self.aux.replication.write_quorum(&self.aux.system) {
+					return Err(Error::Message(format!("Not offloading as we don't have a quorum of nodes to write to.")));
+				}
 
 				counter += 1;
 				debug!(