Bitwarden_rs: As a user of an organization, I can't modify an item even though I have read/write access

Created on 30 Aug 2018  路  5Comments  路  Source: dani-garcia/bitwarden_rs

Reproduction steps:

  • Using the latest docker container.
  • Log in to the web UI as user of an organization. The user must not have access to all items in the organization, just read/write access to specific collection(s).
  • Click on an item, edit something and click "Save".

Expected result:
The request succeeds and my changes have been saved, because I have read/write access to the collection where the item is shared.

Actual result:
Red error message pops up saying "You don't have permission to add cipher directly to organization".

Remarks:
The request succeeds if the user has access to all collections in the organization. ("This user can access and modify all items.")

Background:
Failing request is:
PUT https:///api/ciphers/

bug

All 5 comments

Thanks for reporting that, this bug was introduced recently and hopefully should be fixed with d336d89.

Awesome, thank you!
I'm going to test it and report back.

Just be aware that the PR wasn't merged yet and even after it's merged it takes about an hour to build the docker image, so if you want to test it now, you need to build your own image.

The image is now building, give it about an hour and you can test the fix @janost .

Seems to work great, thank you.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

mrtargaryen picture mrtargaryen  路  5Comments

Jungack picture Jungack  路  3Comments

esell picture esell  路  6Comments

durd picture durd  路  3Comments

tycho picture tycho  路  5Comments