1
Custom role: allow createNewCollections without access to all collections
Source: dani-garcia/vaultwarden#7761 · opened by @opirgali-tech
On 1.37.3 a Manager can create collections only if they also have access to all collections. In the membership JSON the three collection permissions of the Custom role are tied to the same flag: and post_organization_collections rejects a Manager without access_all. I see the TODO: Add full support for Custom User Roles right next to it. This blocks delegation for us: to let a team lead create a collection when a new project appears, we would have to give them visibility of every collection in the organization, including other teams'. So every collection goes through an admin. Nested collections are affected too, since nesting is just a slash in the name. Would you consider splitting createNewCollections off from editAnyCollection and deleteAnyCollection, so that a member can create collections while still seeing only the ones assigned to them? I realize this needs somewhere to store the permissions per member instead of the single access_all flag. Happy to do the wo…
No pledges yet. Be the first to back this.
Comments
Similar requests
[duplicate] As my user has "manager" role on multiple collections, I want to invite a user to multiple collections at once
1 vote · 0 comments
Assign Manager Role only to specific collections
1 vote · 0 comments
Deleting a collection - Backend says Yes, Frontend says No. Can we fix that?
1 vote · 0 comments
Right to invite new users without accessing all collections
3 votes · 0 comments
Feature proposal: Custom Roles support with granular organization permissions
1 vote · 0 comments
No comments yet.