[GH-ISSUE #1123] Organization items shows up in My Vault even when no access #793

New issue

Closed

opened 2026-03-03 02:03:17 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 02:03:17 +03:00

Owner

Originally created by @assid2 on GitHub (Aug 31, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1123

Subject of the issue

If you disable the collection from a user EVEN owner, then the items of the organization should not show up in "My Vault". The owner must go to the organization's vault to see the items

Your environment

Bitwarden_rs version: 1.16.3

Install method: Docker latest/postgresql
Clients used:
Reverse proxy and version:
Version of mysql/postgresql: postgresql
Other relevant information:

Steps to reproduce

N/A

Expected behaviour

Organization Vault details should not show up in "My Vault" for owners, if the the checkbox for the collection has not been enabled to them.. If they still need to access the information, they can go to the organization vault.

Actual behaviour

make 2 owners.. then for yourself.. set it to : This user can access only the selected collections.
and remove access to the collection. Once you do this the collection should not show up in your vault and you should have to go to the organizations vault

Relevant logs

Originally created by @assid2 on GitHub (Aug 31, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1123  ### Subject of the issue  If you disable the collection from a user EVEN owner, then the items of the organization should not show up in "My Vault". The owner must go to the organization's vault to see the items ### Your environment  * Bitwarden_rs version: 1.16.3  * Install method: Docker latest/postgresql * Clients used:  * Reverse proxy and version:  * Version of mysql/postgresql: postgresql * Other relevant information: ### Steps to reproduce  N/A ### Expected behaviour  Organization Vault details should not show up in "My Vault" for owners, if the the checkbox for the collection has not been enabled to them.. If they still need to access the information, they can go to the organization vault. ### Actual behaviour  make 2 owners.. then for yourself.. set it to : This user can access only the selected collections. and remove access to the collection. Once you do this the collection should not show up in your vault and you should have to go to the organizations vault ### Relevant logs