fix: resolve group permission conflicts with multiple groups #11

New Issue

AtHeartEngineer · 2025-07-08T08:37:20-04:00

AtHeartEngineer commented

2025-07-08 08:37:20 -04:00

Originally created by @DasCanard on 7/3/2025

When a user belonged to multiple groups with different permissions for the same collection, only the permissions from one group were applied instead of combining them properly. This caused users to see incorrect access levels when initially viewing collection items.

The fix combines permissions from all user groups by taking the most permissive settings:

read_only: false if ANY group allows write access
hide_passwords: false if ANY group allows password viewing
manage: true if ANY group allows management

This ensures users immediately see the correct permissions when opening collection entries, matching the behavior after editing and saving.

resolves #5590

*Originally created by @DasCanard on 7/3/2025* When a user belonged to multiple groups with different permissions for the same collection, only the permissions from one group were applied instead of combining them properly. This caused users to see incorrect access levels when initially viewing collection items. The fix combines permissions from all user groups by taking the most permissive settings: - read_only: false if ANY group allows write access - hide_passwords: false if ANY group allows password viewing - manage: true if ANY group allows management This ensures users immediately see the correct permissions when opening collection entries, matching the behavior after editing and saving. resolves #5590

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#11