[PR #6811] [MERGED] Fix org-details issue #7480

Closed
opened 2026-03-07 21:18:17 -06:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/dani-garcia/vaultwarden/pull/6811
Author: @BlackDex
Created: 2/10/2026
Status: Merged
Merged: 2/10/2026
Merged by: @dani-garcia

Base: mainHead: fix-org-issue


📝 Commits (1)

📊 Changes

1 file changed (+5 additions, -1 deletions)

View changed files

📝 src/api/core/organizations.rs (+5 -1)

📄 Description

Fix an issue where it was possible for users who were not eligible to access all org ciphers to be able to download and extract the encrypted contents. Only Managers with full access and Admins and Owners should be able to access this endpoint.

This change will block and prevent access for other users.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/dani-garcia/vaultwarden/pull/6811 **Author:** [@BlackDex](https://github.com/BlackDex) **Created:** 2/10/2026 **Status:** ✅ Merged **Merged:** 2/10/2026 **Merged by:** [@dani-garcia](https://github.com/dani-garcia) **Base:** `main` ← **Head:** `fix-org-issue` --- ### 📝 Commits (1) - [`6aa1bdf`](https://github.com/dani-garcia/vaultwarden/commit/6aa1bdffb080fdf6f98353ceeab008dec8c1d5fe) Fix org-details issue ### 📊 Changes **1 file changed** (+5 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `src/api/core/organizations.rs` (+5 -1) </details> ### 📄 Description Fix an issue where it was possible for users who were not eligible to access all org ciphers to be able to download and extract the encrypted contents. Only Managers with full access and Admins and Owners should be able to access this endpoint. This change will block and prevent access for other users. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-03-07 21:18:17 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#7480