Skip to content

Commit f87e5c2

Browse files
committed
Add limit parameter to search_merged_pre_and_registered_users to prevent excessive results
1 parent ac7c462 commit f87e5c2

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

services/web/server/src/simcore_service_webserver/users/_accounts_repository.py

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -351,6 +351,7 @@ async def search_merged_pre_and_registered_users(
351351
filter_by_user_name_like: str | None = None,
352352
filter_by_primary_group_id: int | None = None,
353353
product_name: ProductName | None = None,
354+
limit: int = 50,
354355
) -> list[Row]:
355356
"""Searches and merges users from both users and pre-registration tables"""
356357
users_alias = sa.alias(users, name="users_alias")
@@ -423,6 +424,9 @@ async def search_merged_pre_and_registered_users(
423424

424425
final_query = queries[0] if len(queries) == 1 else sa.union(*queries)
425426

427+
# Add limit to prevent excessive results
428+
final_query = final_query.limit(limit)
429+
426430
async with pass_or_acquire_connection(engine, connection) as conn:
427431
result = await conn.execute(final_query)
428432
return result.fetchall()

0 commit comments

Comments
 (0)