Originally created by @janost on GitHub (Aug 30, 2018).
Reproduction steps:
Using the latest docker container.
Log in to the web UI as user of an organization. The user must not have access to all items in the organization, just read/write access to specific collection(s).
Click on an item, edit something and click "Save".
Expected result:
The request succeeds and my changes have been saved, because I have read/write access to the collection where the item is shared.
Actual result:
Red error message pops up saying "You don't have permission to add cipher directly to organization".
Remarks:
The request succeeds if the user has access to all collections in the organization. ("This user can access and modify all items.")
Background:
Failing request is:
PUT https:///api/ciphers/<CIPHER_ID>
Originally created by @janost on GitHub (Aug 30, 2018).
Reproduction steps:
- Using the latest docker container.
- Log in to the web UI as user of an organization. The user must not have access to all items in the organization, just read/write access to specific collection(s).
- Click on an item, edit something and click "Save".
Expected result:
The request succeeds and my changes have been saved, because I have read/write access to the collection where the item is shared.
Actual result:
Red error message pops up saying "You don't have permission to add cipher directly to organization".
Remarks:
The request succeeds if the user has access to all collections in the organization. ("This user can access and modify all items.")
Background:
Failing request is:
PUT https://<HOSTNAME>/api/ciphers/<CIPHER_ID>
GiteaMirror
added the bug label 2025-11-07 06:21:49 -06:00
Just be aware that the PR wasn't merged yet and even after it's merged it takes about an hour to build the docker image, so if you want to test it now, you need to build your own image.
@mprasil commented on GitHub (Aug 30, 2018):
Just be aware that the PR wasn't merged yet and even after it's merged it takes about an hour to build the docker image, so if you want to test it now, you need to build your own image.
The image is now building, give it about an hour and you can test the fix @janost .
@mprasil commented on GitHub (Aug 30, 2018):
The image is [now building](https://hub.docker.com/r/mprasil/bitwarden/builds/bxenhmyeatac7ck5yhcsk66/), give it about an hour and you can test the fix @janost .
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @janost on GitHub (Aug 30, 2018).
Reproduction steps:
Expected result:
The request succeeds and my changes have been saved, because I have read/write access to the collection where the item is shared.
Actual result:
Red error message pops up saying "You don't have permission to add cipher directly to organization".
Remarks:
The request succeeds if the user has access to all collections in the organization. ("This user can access and modify all items.")
Background:
Failing request is:
PUT https:///api/ciphers/<CIPHER_ID>
@mprasil commented on GitHub (Aug 30, 2018):
Thanks for reporting that, this bug was introduced recently and hopefully should be fixed with
d336d89.@janost commented on GitHub (Aug 30, 2018):
Awesome, thank you!
I'm going to test it and report back.
@mprasil commented on GitHub (Aug 30, 2018):
Just be aware that the PR wasn't merged yet and even after it's merged it takes about an hour to build the docker image, so if you want to test it now, you need to build your own image.
@mprasil commented on GitHub (Aug 30, 2018):
The image is now building, give it about an hour and you can test the fix @janost .
@janost commented on GitHub (Sep 3, 2018):
Seems to work great, thank you.