From df6087f94a7accb0acc8825e2f3702999416cffa Mon Sep 17 00:00:00 2001
From: tom27052006 <83423411+tom27052006@users.noreply.github.com>
Date: Sun, 26 Jul 2026 22:31:22 +0200
Subject: [PATCH] Allow accessReports users to load organization ciphers

---
 src/api/core/organizations.rs | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/api/core/organizations.rs b/src/api/core/organizations.rs
index ae7429ef..f4975672 100644
--- a/src/api/core/organizations.rs
+++ b/src/api/core/organizations.rs
@@ -1075,8 +1075,12 @@ async fn get_org_details(data: OrgIdData, headers: ManagerHeadersLoose, conn: Db
         err_code!("Resource not found.", "Organization id's do not match", rocket::http::Status::NotFound.code);
     }
 
-    if !headers.membership.has_full_access() {
-        err_code!("Resource not found.", "User does not have full access", rocket::http::Status::NotFound.code);
+    if !headers.membership.has_full_access() && !headers.membership.has_access_reports() {
+        err_code!(
+            "Resource not found.",
+            "User does not have permission to access all organization ciphers",
+            rocket::http::Status::NotFound.code
+        );
     }
 
     Ok(Json(json!({