let invited members access OrgMemberHeaders #242

New Issue

AtHeartEngineer · 2025-07-08T08:43:55-04:00

AtHeartEngineer commented

2025-07-08 08:43:55 -04:00

Originally created by @stefan0xC on 1/26/2025

OrgMemberHeaders should be available for invited members too. I've refactored the OrgHeaders to also get non-revoked MembershipStatus (Invited, Accepted, Confirmed) in order to not lower security too much.

This should allow invited members to get enrolled with automatic account recovery policy again, i.e. fix #5459

*Originally created by @stefan0xC on 1/26/2025* `OrgMemberHeaders` should be available for invited members too. I've refactored the `OrgHeaders` to also get non-revoked `MembershipStatus` (Invited, Accepted, Confirmed) in order to not lower security too much. This should allow invited members to get enrolled with automatic account recovery policy again, i.e. fix #5459

AtHeartEngineer closed this issue

2025-07-08 08:43:55 -04:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#242