github-starred/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-03-11 17:41:29 -05:00
Code Issues 79 Packages Projects Releases 78 Wiki Activity

Protect Organization related GET requests #3649

New Issue
Closed
opened 2026-03-07 19:01:22 -06:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-03-07 19:01:22 -06:00
Owner
Copy Link

Originally created by @mprasil on GitHub (May 29, 2018).

It seems that we don't really check user's access rights when doing /organization/* API calls. While this is mostly harmless in theory, we should probably protect all of these under some common check.

It think implementing some form of request guard would probably be the best way to handle that.

Originally created by @mprasil on GitHub (May 29, 2018). It seems that we don't really check user's access rights when doing `/organization/*` API calls. While this is mostly harmless in theory, we should probably protect all of these under some common check. It think implementing some form of request guard would probably be the best way to handle that.
GiteaMirror commented 2026-03-07 19:01:23 -06:00
Author
Owner
Copy Link

@mprasil commented on GitHub (May 30, 2018):

Submitted an PR #34 to fix this.

@mprasil commented on GitHub (May 30, 2018): Submitted an PR #34 to fix this.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
better for forum
bug
documentation
duplicate
enhancement
future Vault
good first issue
help wanted
low priority
notes
pull-request
Mirrored from GitHub Pull Request
 question
SSO
Third party
troubleshooting
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#3649
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?