allow the removal of non-confirmed owners #1986

New Issue

MrUnknownDE · 2026-04-06T02:45:54+02:00

MrUnknownDE commented

2026-04-06 02:45:54 +02:00

Originally created by @stefan0xC on 9/27/2022

If you invite a new user as another owner of an organization you cannot remove or change the role of the user until the user accepts the invitation and is confirmed. This behavior was introduced in 1722742a (previously, in 1.25.2 you could remove yourself as the owner as long as you had invited someone else as owner which would also be incorrect).

This change ensures user_to_edit and user_to_delete are actually confirmed users, before checking if they are the last owner of an organization.

*Originally created by @stefan0xC on 9/27/2022* If you invite a new user as another owner of an organization you cannot remove or change the role of the user until the user accepts the invitation and is confirmed. This behavior was introduced in 1722742a (previously, in 1.25.2 you could remove yourself as the owner as long as you had invited someone else as owner which would also be incorrect). This change ensures user_to_edit and user_to_delete are actually confirmed users, before checking if they are the last owner of an organization.

MrUnknownDE closed this issue

2026-04-06 02:45:54 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1986