History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: QB-783
Type: Improvement Improvement
Status: Resolved Resolved
Resolution: Fixed
Priority: Major Major
Assignee: Robin Shen
Reporter: Robin Shen
Votes: 1
Watchers: 1
Operations

If you were logged in you would be able to see more operations.
QuickBuild

Limit number of query results via RESTful API for normal users

Created: 05/Jan/11 01:02 AM   Updated: 09/Jan/11 07:45 AM
Component/s: None
Affects Version/s: 3.1.15
Fix Version/s: 3.1.16

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown


 Description  « Hide
We encountered a problem today. One of our users tried the query /rest/builds via REST API. The result is that it completely blocked the server as we have thousands of builds. We verified this in both QB 2.1 and 3.1.

First, /rest/builds shouldn't be available past certain limit. Moreover, our concern is that any of our users can actually produce a denial of service on our server by doing heavy queries.

Could you please set a reasonable limit on the query above and any other that does heavy loading of data?

 All   Comments   Work Log   Change History      Sort Order:
Robin Shen [09/Jan/11 07:45 AM]
Non-admin users are now only allowed to search up to 25 builds per query. Other queries will not consume too many server resources.