tree f0b65e0f2b8218a118d24415b5dc544239477802
parent bf22fef492414882172cd153b02e692b29f34c36
author Jacek Centkowski <geminica.programs@gmail.com> 1646388435 +0100
committer Jacek Centkowski <geminica.programs@gmail.com> 1647532558 +0100

Ignore '--no-limit' query changes option for anonymous users

Adding 'no-limit' option to query changes REST API can result in
substantial resources usage. This change ensures that it cannot be used
(or abused) by anonymous users.

Notes:
* one can still configure them to request unlimited results by setting
  'Query Limit' Global Capability to Integer.MAX_VALUE for 'Anonymous
  Users' group
* 'no-limit' option is only a part of query changes API hence accounts,
  groups and projects are not affected by this change

Release-Notes: Ignore '--no-limit' for anonymous users change queries
Change-Id: Ic789690ffd2f94f02989c2906fcd75e442df86f8