Resolves issue #1843, Use field projections in getFilteredCveId.

src/controller/cve-id.controller/cve-id.controller.js

@@ -39,8 +39,9 @@ async function getFilteredCveId (req, res, next) {
     const requesterOrgUUID = await authContext.getRequesterOrgUUID(req, orgRepo)
 
     // Create map of orgUUID to shortnames and users to simplify aggregation later
-    const orgs = await orgRepo.getAllOrgs()
-    const users = await userRepo.getAllUsers()
+    // Only project the fields needed for the maps to avoid fetching full documents
+    const orgs = await orgRepo.getAllOrgs({}, { UUID: 1, short_name: 1, _id: 0 })
+    const users = await userRepo.getAllUsers({}, { UUID: 1, username: 1, org_UUID: 1, _id: 0 })
 
     const orgMap = {}
     const userMap = {}

src/repositories/orgRepository.js

@@ -47,8 +47,8 @@ class OrgRepository extends BaseRepository {
     return utils.isBulkDownload(shortName)
   }
 
-  async getAllOrgs () {
-    return this.collection.find()
+  async getAllOrgs (options = {}, projection = {}) {
+    return this.collection.find({}, projection, options)
   }
 
   async deleteOneByShortName (shortName, options = {}) {

src/repositories/userRepository.js

@@ -61,8 +61,8 @@ class UserRepository extends BaseRepository {
     return this.collection.findOneAndUpdate(filter, updatePayload, options)
   }
 
-  async getAllUsers () {
-    return this.collection.find()
+  async getAllUsers (options = {}, projection = {}) {
+    return this.collection.find({}, projection, options)
   }
 }