prevent managers from creating collections #85

New Issue

MrUnknownDE · 2026-04-05T20:29:50+02:00

MrUnknownDE commented

2026-04-05 20:29:50 +02:00

Originally created by @stefan0xC on 3/2/2026

managers without the access_all flag should not be able to create collections. the manage all permission consists of three separate custom permission which would need to be properly implemented first for more delegate control.

this should fix #6871 for now by both preventing managers from creating collections as well as restricting the api call for managers to the ones that have access to all collections in order to prevent permission errors.

*Originally created by @stefan0xC on 3/2/2026* managers without the access_all flag should not be able to create collections. the manage all permission consists of three separate custom permission which would need to be properly implemented first for more delegate control. <img width="232" height="192" alt="image" src="https://github.com/user-attachments/assets/213b1182-4c9d-4813-b138-9c5bf93a6a5c" /> this should fix #6871 for now by both preventing managers from creating collections as well as restricting the api call for managers to the ones that have access to all collections in order to prevent permission errors.

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#85