FOUR-33534 Error Loading Items in saved search with Participant user

[devmiguelangel]

Issue & Reproduction Steps

Error Loading Items in saved search with Participant user

Solution

The Saved Search Available Columns returns a 500 with MySQL error 1038 when column discovery sorts a request whose data JSON is larger than sort_buffer_size. This happens for any PMQL with no process scope, including requester = "...". The user's role is not involved.

• Column discovery still uses the Saved Search PMQL, but it no longer sorts rows that include data.
• The id sample is ORDER BY id DESC LIMIT 25, and it skips payloads larger than 1MB.
• data is loaded for those ids with no ORDER BY.
• MySQL error 1038 is logged and treated as an empty sample, so default columns still return 200. Any other database error is rethrown.

CleanShot.2026-09-25.at.15.36.29.mp4

Related Tickets & Packages

FOUR-33534
https://github.com/ProcessMaker/package-savedsearch/pull/700

Code Review Checklist

• I have pulled this code locally and tested it on my instance, along with any associated packages.
• This code adheres to ProcessMaker Coding Guidelines.
• This code includes a unit test or an E2E test that tests its functionality, or is covered by an existing test.
• This solution fixes the bug reported in the original ticket.
• This solution does not alter the expected output of a component in a way that would break existing Processes.
• This solution does not implement any breaking changes that would invalidate documentation or cause existing Processes to fail.
• This solution has been tested with enterprise packages that rely on its functionality and does not introduce bugs in those packages.
• This code does not duplicate functionality that already exists in the framework or in ProcessMaker.
• This ticket conforms to the PRD associated with this part of ProcessMaker.

ci:package-savedsearch:FOUR-33534

[cursor]

PR Summary

Low Risk
Small controller return-path fix plus feature tests; behavior change is avoiding a redundant query, not new API semantics in this diff.

Overview
Fixes double pagination on the Variable Finder path in ProcessVariableController: the list endpoint now returns the paginator built once instead of calling paginate() again, so page metadata and rows stay aligned (including when onlyAvailable merges saved-search columns).

Test suite changes defer heavy process/variable seeding to tests that need it, and add coverage for requester PMQL saved searches with empty processIds, onlyAvailable filtering, large request data, simulated MySQL 1038 sort memory during id sampling, and scoping so other requesters’ fields are not exposed.

^{Reviewed by Cursor Bugbot for commit 671ccb6. Bugbot is set up for automated code reviews on this repo. Configure here.}

[decisions-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube