[GH-ISSUE #26] get_org_collection_detail() errors with "Collection not found" when User isn't directly assigned to collection #8821

New Issue

2026-04-20T11:30:11-05:00

GiteaMirror commented

2026-04-20 11:30:11 -05:00

Originally created by @mprasil on GitHub (May 19, 2018).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/26

The function doesn't work for UserOrganization with access_all, for Admin or Owner that doesn't have direct CollectionUser mapping.

This is because we only use Collection::find_by_uuid_and_user() in the handler, but the above users don't necessarily need to have access allowed for specific Collection as they can generally access any Collection within Organization. We need to check whether that isn't the case before returning error.

Originally created by @mprasil on GitHub (May 19, 2018). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/26 The function doesn't work for `UserOrganization` with `access_all`, for `Admin` or `Owner` that doesn't have direct `CollectionUser` mapping. This is because we only use `Collection::find_by_uuid_and_user()` in the handler, but the above users don't necessarily need to have access allowed for specific `Collection` as they can generally access any `Collection` within `Organization`. We need to check whether that isn't the case before returning error.

GiteaMirror closed this issue

2026-04-20 11:30:12 -05:00

GiteaMirror commented

2026-04-20 11:30:13 -05:00

@dani-garcia commented on GitHub (May 21, 2018):

This should be fixed by your PR #28 so I'm closing it. Thanks!

@dani-garcia commented on GitHub (May 21, 2018): This should be fixed by your PR #28 so I'm closing it. Thanks!

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#8821