1
Restrict the possibility for users to clear the recycle bin
Source: dani-garcia/vaultwarden#7449 · opened by @RaphaelRoumezin
In my deployment, I've restricted the user capacity to empty the recycle bin manually through Nginx rules, which can now only be done by the trash auto-emptying server routine:
In an enterprise context, this allows for mistake recovery, and prevents bad actors from deleting credentials that may ultimately only be stored on Vaultwarden. This pairs well with the password history feature.
Would this feature be interesting to integrate directly to Vaultwarden, as a server-wide configuration ? I'd be happy to make a PR for it.
In an enterprise context, this allows for mistake recovery, and prevents bad actors from deleting credentials that may ultimately only be stored on Vaultwarden. This pairs well with the password history feature.
Would this feature be interesting to integrate directly to Vaultwarden, as a server-wide configuration ? I'd be happy to make a PR for it.
No pledges yet. Be the first to back this.
Comments
Similar requests
Adding an option to "Clear User" in Admin Panel (the backend one)
1 vote · 0 comments
Proposal: support `.onion` domains
0 votes · 0 comments
Request for publishing standalone binaries
1 vote · 0 comments
users.equivalent_domains field is cleartext in the database
1 vote · 0 comments
Upload web vault as action artifact (or add them to releases)
1 vote · 0 comments
No comments yet.