github-starred/android
2
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2026-08-25 17:09:55 -05:00
Code Issues 2.4k Packages Projects Releases 129 Wiki Activity

Cipher fields not disabled in view only collection #2125

New Issue
Open
opened 2025-11-26 23:08:43 -06:00 by GiteaMirror · 3 comments
GiteaMirror commented 2025-11-26 23:08:43 -06:00
Owner
Copy Link
Copy Source

Originally created by @ajasnz on GitHub (Jan 11, 2025).

Steps To Reproduce

  1. Create a collection
  2. Add a cipher to the collection
  3. Assign a member view only permissions to the collection
  4. Using the member with view only access open the cipher in edit mode
  5. Try to edit a field
  6. Click save

Expected Result

Cipher fields have a disabled state and the user cannot alter the field. A useful error message is displayed when clicking save to explain the item is view only

Actual Result

The user is able to change field contents (not saved) giving the impression they can edit the cipher and potentially leading to lost login details.
When clicking save the error message is "you must assign at least one collection" which is not an accurate representation of the issue

Screenshots or Videos

No response

Additional Context

No response

Build Version

2025.1

What server are you connecting to?

US

Self-host Server Version

No response

Environment Details

Device: Samsung galaxy s23+
OS: Android 15, one UI 6

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
Originally created by @ajasnz on GitHub (Jan 11, 2025). ### Steps To Reproduce 1. Create a collection 2. Add a cipher to the collection 3. Assign a member view only permissions to the collection 4. Using the member with view only access open the cipher in edit mode 5. Try to edit a field 6. Click save ### Expected Result Cipher fields have a disabled state and the user cannot alter the field. A useful error message is displayed when clicking save to explain the item is view only ### Actual Result The user is able to change field contents (not saved) giving the impression they can edit the cipher and potentially leading to lost login details. When clicking save the error message is "you must assign at least one collection" which is not an accurate representation of the issue ### Screenshots or Videos _No response_ ### Additional Context _No response_ ### Build Version 2025.1 ### What server are you connecting to? US ### Self-host Server Version _No response_ ### Environment Details Device: Samsung galaxy s23+ OS: Android 15, one UI 6 ### Issue Tracking Info - [X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
GiteaMirror added the app:password-managerbug labels 2025-11-26 23:08:43 -06:00
GiteaMirror commented 2025-11-26 23:08:44 -06:00
Author
Owner
Copy Link
Copy Source

@bitwarden-bot commented on GitHub (Jan 11, 2025):

Thank you for your report! We've added this to our internal board for review.
ID: PM-16963

@bitwarden-bot commented on GitHub (Jan 11, 2025): Thank you for your report! We've added this to our internal board for review. ID: PM-16963
GiteaMirror commented 2025-11-26 23:08:44 -06:00
Author
Owner
Copy Link
Copy Source

@SergeantConfused commented on GitHub (Jan 11, 2025):

Hello @ajasnz,

Thank you for your report. I was able to reproduce this behaviour and have flagged it to the Engineering department.
Please feel free to post additional information, such as screenshots or a screen video recordings, if you wish.

Thank you again,

@SergeantConfused commented on GitHub (Jan 11, 2025): Hello @ajasnz, Thank you for your report. I was able to reproduce this behaviour and have flagged it to the Engineering department. Please feel free to post additional information, such as screenshots or a screen video recordings, if you wish. Thank you again,
GiteaMirror commented 2025-11-26 23:08:45 -06:00
Author
Owner
Copy Link
Copy Source

@closebot-bw commented on GitHub (Nov 18, 2025):

⚠️ Stale Issue Notice

This issue has been automatically marked as stale due to inactivity. It will be closed in 2 weeks (December 02, 2025) if no further activity occurs.

If this issue is still relevant and you would like to keep it open, please:

  • Comment on this issue to show continued interest
  • Provide any additional information or updates
  • Confirm that the issue still exists in the latest version

Thank you for your contribution to this project! 🙏

@closebot-bw commented on GitHub (Nov 18, 2025): ⚠️ **Stale Issue Notice** This issue has been automatically marked as stale due to inactivity. It will be closed in **2 weeks** (December 02, 2025) if no further activity occurs. If this issue is still relevant and you would like to keep it open, please: - Comment on this issue to show continued interest - Provide any additional information or updates - Confirm that the issue still exists in the latest version Thank you for your contribution to this project! 🙏
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
app:authenticator
app:password-manager
bug
bug-passkey
customer-support
duplicate
enhancement
good first issue
help wanted
needs-reply
needs-response
pull-request
Mirrored from GitHub Pull Request
 question
No labels app:password-manager bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
GiteaMirror ninjasurge (Kaehlen Rog)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#2125