dani-garcia / vaultwarden

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
GNU Affero General Public License v3.0
39.25k stars 1.9k forks source link

Fix editing members which have access-all rights #5213

Closed BlackDex closed 1 day ago

BlackDex commented 2 days ago

With web-vault v2024.6.2 and lower, if a user has access-all rights either as an org-member or via a group it shouldn't return individual collections.

This probably needs to be changed with newer versions which do not support the access-all feature anymore and work with manage. But with the current version this should solve access right issues.

Fixes #5212