A Civi user was doing normal email searches and merges from the search results, but seems to have kicked off an unlimited scan of the email table for duplicates, locking it for long enough to block a couple dozen contribution inserts. She says she never saw the dedupe search screen (where we enforce a limit)
Instrument the dedupe queries to log a full stack trace, and enforce a limit at a level lower than the UI
Change 376760 had a related patch set uploaded (by Ejegg; owner: Ejegg):
[wikimedia/fundraising/crm@master] Log a stack trace for all dedupe queries
Change 376760 merged by jenkins-bot:
[wikimedia/fundraising/crm@master] Log a stack trace for all dedupe queries
Change 379601 had a related patch set uploaded (by Ejegg; owner: Ejegg):
[wikimedia/fundraising/crm@master] WIP Use permissions hook to prevent unlimited dedupe
Change 379601 merged by jenkins-bot:
[wikimedia/fundraising/crm@master] Use permissions hook to prevent unlimited dedupe
We've deployed a couple of things to block the bad queries, but we're still not sure exactly where the bad redirect is coming from in Civi core
Change 381311 had a related patch set uploaded (by Eileen; owner: Eileen):
[wikimedia/fundraising/crm/civicrm@master] CRM-21224 reinstate use of limit on dedupe searches
Change 381311 merged by jenkins-bot:
[wikimedia/fundraising/crm/civicrm@master] CRM-21224 reinstate use of limit on dedupe searches