From 5a6d5f5887f5b468dee8d02a73f7b26b6f6799ec Mon Sep 17 00:00:00 2001 From: Thomas Rittson <31796059+eliykat@users.noreply.github.com> Date: Wed, 27 Nov 2024 20:44:29 +1000 Subject: [PATCH] fix: createNewCollections should not grant access to AC (#12142) --- .../src/admin-console/models/domain/organization.ts | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/libs/common/src/admin-console/models/domain/organization.ts b/libs/common/src/admin-console/models/domain/organization.ts index e0be19986c..497d3b0889 100644 --- a/libs/common/src/admin-console/models/domain/organization.ts +++ b/libs/common/src/admin-console/models/domain/organization.ts @@ -164,13 +164,17 @@ export class Organization { return (this.isAdmin || this.permissions.accessEventLogs) && this.useEvents; } + /** + * Returns true if the user can access the Import page in the Admin Console. + * Note: this does not affect user access to the Import page in Password Manager, which can also be used to import + * into organization collections. + */ get canAccessImport() { return ( this.isProviderUser || this.type === OrganizationUserType.Owner || this.type === OrganizationUserType.Admin || - this.permissions.accessImportExport || - this.canCreateNewCollections // To allow users to create collections and then import into them + this.permissions.accessImportExport ); }