From ba8aba4d17e93fe24a0b8db51dd41fd7cca40a72 Mon Sep 17 00:00:00 2001
From: Conrad Irwin <conrad.irwin@gmail.com>
Date: Wed, 15 May 2024 21:04:37 -0600
Subject: [PATCH] hotfix for collab crashes (#11885)

Release Notes:

- N/A
---
 crates/collab/src/db/queries/users.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/crates/collab/src/db/queries/users.rs b/crates/collab/src/db/queries/users.rs
index b884f276de240be32ada482c1e36bb2f0972ffac..ff5c4d5c17ec26d5237970006dd21e54c9bde400 100644
--- a/crates/collab/src/db/queries/users.rs
+++ b/crates/collab/src/db/queries/users.rs
@@ -48,6 +48,9 @@ impl Database {
 
     /// Returns all users by ID. There are no access checks here, so this should only be used internally.
     pub async fn get_users_by_ids(&self, ids: Vec<UserId>) -> Result<Vec<user::Model>> {
+        if ids.len() >= 10000_usize {
+            return Err(anyhow!("too many users"))?;
+        }
         self.transaction(|tx| async {
             let tx = tx;
             Ok(user::Entity::find()