[GH-ISSUE #1136] Org managers can't create or manage collections #9615

New Issue

GiteaMirror · 2026-04-20T12:47:46-05:00

GiteaMirror commented

2026-04-20 12:47:46 -05:00

Originally created by @jjlin on GitHub (Sep 12, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1136

According to https://bitwarden.com/help/article/user-types-access-control/#user-types, org managers should be able to:

Only administer a collection it is associated with by an Owner or Admin
Access and manage assigned collections in an organization
Create new collections and modify the assigned collections
Set user access for assigned collections

Attempting to create a new collection via the web vault results in

and log messages

[2020-09-12 00:29:38.993][request][INFO] POST /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections
[2020-09-12 00:29:38.995][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint
[2020-09-12 00:29:38.995][response][INFO] POST /api/organizations/<org_id>/collections (post_organization_collections) => 401 Unauthorized

Attempting to manage an existing collection via the web vault results in the Your login session has expired UI message, and log messages

[2020-09-12 00:31:57.174][request][INFO] GET /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections/320a942c-d232-4273-96e5-d2c872f8d1d8/details
[2020-09-12 00:31:57.175][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint
[2020-09-12 00:31:57.175][response][INFO] GET /api/organizations/<org_id>/collections/<coll_id>/details (get_org_collection_detail) => 401 Unauthorized

(This issue was first reported at https://bitwardenrs.discourse.group/t/manager-can-not-create-a-collection/287.)

Originally created by @jjlin on GitHub (Sep 12, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1136 According to https://bitwarden.com/help/article/user-types-access-control/#user-types, org managers should be able to: * Only administer a collection it is associated with by an Owner or Admin * Access and manage assigned collections in an organization * Create new collections and modify the assigned collections * Set user access for assigned collections Attempting to create a new collection via the web vault results in ![Screenshot 2020-09-12 003122](https://user-images.githubusercontent.com/203380/92990264-cae92880-f48f-11ea-9aad-ab26a8d761cd.png) and log messages ``` [2020-09-12 00:29:38.993][request][INFO] POST /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections [2020-09-12 00:29:38.995][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint [2020-09-12 00:29:38.995][response][INFO] POST /api/organizations/<org_id>/collections (post_organization_collections) => 401 Unauthorized ``` Attempting to manage an existing collection via the web vault results in the `Your login session has expired` UI message, and log messages ``` [2020-09-12 00:31:57.174][request][INFO] GET /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections/320a942c-d232-4273-96e5-d2c872f8d1d8/details [2020-09-12 00:31:57.175][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint [2020-09-12 00:31:57.175][response][INFO] GET /api/organizations/<org_id>/collections/<coll_id>/details (get_org_collection_detail) => 401 Unauthorized ``` (This issue was first reported at https://bitwardenrs.discourse.group/t/manager-can-not-create-a-collection/287.)

GiteaMirror added the enhancement bug low priority labels 2026-04-20 12:47:46 -05:00

GiteaMirror closed this issue

2026-04-20 12:47:48 -05:00

GiteaMirror commented

2026-04-20 12:47:50 -05:00

@FLX-0x00 commented on GitHub (Oct 7, 2020):

We are facing with the same issue. Is there any workaround?

@FLX-0x00 commented on GitHub (Oct 7, 2020): We are facing with the same issue. Is there any workaround?

GiteaMirror commented

2026-04-20 12:47:52 -05:00

@BlackDex commented on GitHub (Oct 9, 2020):

@blacklist-arcc, and i don't think there actually is a workaround at this point

@BlackDex commented on GitHub (Oct 9, 2020): @blacklist-arcc, and i don't think there actually is a workaround at this point

GiteaMirror commented

2026-04-20 12:47:54 -05:00

@matlink commented on GitHub (Nov 4, 2020):

@BlackDex Any progress on it? It is not really a low priority for us :(

@matlink commented on GitHub (Nov 4, 2020): @BlackDex Any progress on it? It is not really a low priority for us :(

GiteaMirror commented

2026-04-20 12:47:55 -05:00

@matlink commented on GitHub (Nov 11, 2020):

@jjlin @blacklist-arcc @BlackDex I've made a push request, trying to implement this. What I have tested is working so far (collection creation, managing users in it, delete managed collections).

@matlink commented on GitHub (Nov 11, 2020): @jjlin @blacklist-arcc @BlackDex I've made a push request, trying to implement this. What I have tested is working so far (collection creation, managing users in it, delete managed collections).

GiteaMirror commented

2026-04-20 12:47:55 -05:00

@FLX-0x00 commented on GitHub (Nov 13, 2020):

We will test this in our staging environment. Feedback in the next business days

@FLX-0x00 commented on GitHub (Nov 13, 2020): We will test this in our staging environment. Feedback in the next business days

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#9615