starred/vaultwarden

Fork 0

mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-04-26 09:46:00 +03:00

[GH-ISSUE #1136] Org managers can't create or manage collections #804

New issue

Closed

opened 2026-03-03 02:03:22 +03:00 by kerem · 5 comments

kerem commented

2026-03-03 02:03:22 +03:00

Owner

Originally created by @jjlin on GitHub (Sep 12, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1136

According to https://bitwarden.com/help/article/user-types-access-control/#user-types, org managers should be able to:

Only administer a collection it is associated with by an Owner or Admin
Access and manage assigned collections in an organization
Create new collections and modify the assigned collections
Set user access for assigned collections

Attempting to create a new collection via the web vault results in

and log messages

[2020-09-12 00:29:38.993][request][INFO] POST /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections
[2020-09-12 00:29:38.995][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint
[2020-09-12 00:29:38.995][response][INFO] POST /api/organizations/<org_id>/collections (post_organization_collections) => 401 Unauthorized

Attempting to manage an existing collection via the web vault results in the Your login session has expired UI message, and log messages

[2020-09-12 00:31:57.174][request][INFO] GET /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections/320a942c-d232-4273-96e5-d2c872f8d1d8/details
[2020-09-12 00:31:57.175][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint
[2020-09-12 00:31:57.175][response][INFO] GET /api/organizations/<org_id>/collections/<coll_id>/details (get_org_collection_detail) => 401 Unauthorized

(This issue was first reported at https://bitwardenrs.discourse.group/t/manager-can-not-create-a-collection/287.)

Originally created by @jjlin on GitHub (Sep 12, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1136 According to https://bitwarden.com/help/article/user-types-access-control/#user-types, org managers should be able to: * Only administer a collection it is associated with by an Owner or Admin * Access and manage assigned collections in an organization * Create new collections and modify the assigned collections * Set user access for assigned collections Attempting to create a new collection via the web vault results in ![Screenshot 2020-09-12 003122](https://user-images.githubusercontent.com/203380/92990264-cae92880-f48f-11ea-9aad-ab26a8d761cd.png) and log messages ``` [2020-09-12 00:29:38.993][request][INFO] POST /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections [2020-09-12 00:29:38.995][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint [2020-09-12 00:29:38.995][response][INFO] POST /api/organizations/<org_id>/collections (post_organization_collections) => 401 Unauthorized ``` Attempting to manage an existing collection via the web vault results in the `Your login session has expired` UI message, and log messages ``` [2020-09-12 00:31:57.174][request][INFO] GET /api/organizations/3c8806a6-2359-4c6c-b769-3fe52dab91bb/collections/320a942c-d232-4273-96e5-d2c872f8d1d8/details [2020-09-12 00:31:57.175][auth][ERROR] Unauthorized Error: You need to be Admin or Owner to call this endpoint [2020-09-12 00:31:57.175][response][INFO] GET /api/organizations/<org_id>/collections/<coll_id>/details (get_org_collection_detail) => 401 Unauthorized ``` (This issue was first reported at https://bitwardenrs.discourse.group/t/manager-can-not-create-a-collection/287.)

kerem

2026-03-03 02:03:22 +03:00

closed this issue
added the
enhancement

bug

low priority
labels

kerem commented

2026-03-03 02:03:23 +03:00

Author

Owner

@FLX-0x00 commented on GitHub (Oct 7, 2020):

We are facing with the same issue. Is there any workaround?

@FLX-0x00 commented on GitHub (Oct 7, 2020): We are facing with the same issue. Is there any workaround?

kerem commented

2026-03-03 02:03:23 +03:00

Author

Owner

@BlackDex commented on GitHub (Oct 9, 2020):

@blacklist-arcc, and i don't think there actually is a workaround at this point

@BlackDex commented on GitHub (Oct 9, 2020): @blacklist-arcc, and i don't think there actually is a workaround at this point

kerem commented

2026-03-03 02:03:24 +03:00

Author

Owner

@matlink commented on GitHub (Nov 4, 2020):

@BlackDex Any progress on it? It is not really a low priority for us :(

@matlink commented on GitHub (Nov 4, 2020): @BlackDex Any progress on it? It is not really a low priority for us :(

kerem commented

2026-03-03 02:03:24 +03:00

Author

Owner

@matlink commented on GitHub (Nov 11, 2020):

@jjlin @blacklist-arcc @BlackDex I've made a push request, trying to implement this. What I have tested is working so far (collection creation, managing users in it, delete managed collections).

@matlink commented on GitHub (Nov 11, 2020): @jjlin @blacklist-arcc @BlackDex I've made a push request, trying to implement this. What I have tested is working so far (collection creation, managing users in it, delete managed collections).

kerem commented

2026-03-03 02:03:24 +03:00

Author

Owner

@FLX-0x00 commented on GitHub (Nov 13, 2020):

We will test this in our staging environment. Feedback in the next business days

@FLX-0x00 commented on GitHub (Nov 13, 2020): We will test this in our staging environment. Feedback in the next business days

kerem referenced this issue

2026-03-03 08:53:09 +03:00

[PR #804] [MERGED] Improve Github Actions Workflow #2802