bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
9.39k stars 1.26k forks source link

Chocolatey package install is not for all users #12225

Open teknowledgist opened 13 hours ago

teknowledgist commented 13 hours ago

Steps To Reproduce

  1. In Windows, open PowerShell or CMD shell as admin.
  2. run choco install bitwarden -y
  3. close shell window
  4. As unprivileged user (a common security recommendation) find and run BitWarden. (hint: you can't)

Expected Result

BitWarden icon appears on the desktop and/or start menu and can be run by any authenticated user.

Actual Result

BitWarden installs into the profile of the administrative user who installed it via Chocolatey.

Screenshots or Videos

No response

Additional Context

As is the norm for Chocolatey packages, the software should install system-wide for all users. The option is present in the installer with /allusers.

The most consistent choice for Chocolatey users would be to include /allusers in the $packageArgs.SilentArgs lookup table. Adding the ability via package parameters for the user to choose to NOT install system-wide (and the description for how to do so) would be a nice touch. At a minimum, it would probably be acceptable to include text explaining that a system-wide install is possible in the package description like:


System-wide install

By default, this package will install for the installing user only. To install for all users, use the /allusers install argument.

E.G.: choco install bitwarden --ia '/allusers'

Operating System

Windows

Operating System Version

all

Installation method

Chocolatey

Build Version

2024.11.2

Issue Tracking Info

bitwarden-bot commented 13 hours ago

Thank you for reporting this issue! We've added this to our internal tracking system. ID: PM-15528

rmcdowell-bitwarden commented 1 minute ago

Hi there,

Thank you for your report!

I was able to reproduce this issue, and I have flagged this to our engineering team.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thanks once again!