dani-garcia / vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
GNU Affero General Public License v3.0
34.71k stars 1.69k forks source link

Feature Request: User-based Permissions for “Send” Feature #4607

Closed Kapple14 closed 3 weeks ago

Kapple14 commented 1 month ago

Feature Request: User-based Permissions for “Send” Feature

Currently, enabling and disabling the “Send” feature is a binary option that applies to all users. For safety and security reasons, it would be beneficial to have user-based permissions for the “Send” feature. This would allow administrators to specify which users are allowed to use the “Send” feature. I’d be willing to sponsor this feature to get it done faster.

Benefits

Suggested Integration Plan:

Introduce user-based permissions for the “Send” feature, allowing administrators to control which users can access and utilize this functionality from the admin panel.

  1. [ ] Add user-based “Send” feature permissions
    • Implement functionality to assign “Send” feature permissions to individual users.
    • Test API security
  2. [ ] Add an updated user-based “Send” feature to the admin panel
    • Update the admin panel to include controls for managing user-based “Send” feature permissions.
    • Provide clear documentation and user interface for administrators to easily enable or disable the “Send” feature on a per-user basis.
  3. [ ] Add detailed error messaging for the audit logs.
    • Vaultwarden_current_audit_logs
    • For example: Instead of having only the status code (404 not found) we should have more granularity for what the error is (404 not found: description of error + potential solution)
rahizzle commented 4 weeks ago

Discussed in private chat, not part of Vault Warden roadmap