mirror of
https://github.com/bitwarden/server.git
synced 2025-02-08 00:31:27 +01:00
Added the AccessReports permission to enable report viewing (#4648)
This commit is contained in:
parent
aa66b5ad11
commit
78beac9f19
@ -324,12 +324,13 @@ public class CiphersController : Controller
|
|||||||
var org = _currentContext.GetOrganization(organizationId);
|
var org = _currentContext.GetOrganization(organizationId);
|
||||||
|
|
||||||
// We do NOT need to check the organization collection management setting here because Owners/Admins can
|
// We do NOT need to check the organization collection management setting here because Owners/Admins can
|
||||||
// ALWAYS access all ciphers in order to export them. Additionally, custom users with AccessImportExport or
|
// ALWAYS access all ciphers in order to export them. Additionally, custom users with AccessImportExport,
|
||||||
// EditAnyCollection permissions can also always access all ciphers.
|
// EditAnyCollection, or AccessReports permissions can also always access all ciphers.
|
||||||
if (org is
|
if (org is
|
||||||
{ Type: OrganizationUserType.Owner or OrganizationUserType.Admin } or
|
{ Type: OrganizationUserType.Owner or OrganizationUserType.Admin } or
|
||||||
{ Permissions.AccessImportExport: true } or
|
{ Permissions.AccessImportExport: true } or
|
||||||
{ Permissions.EditAnyCollection: true })
|
{ Permissions.EditAnyCollection: true } or
|
||||||
|
{ Permissions.AccessReports: true })
|
||||||
{
|
{
|
||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user