hacktoberfestdockerrocketbitwarden-rsbitwardenvaultwardenrust

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: 2d68421f5d

cached-config-operations

main

revert-7033-patch-1

test_dylint

various_fixes

0.10.0

0.11.0

0.12.0

0.13.0

0.9.0

1.0.0

1.1.0

1.10.0

1.11.0

1.12.0

1.13.0

1.13.1

1.14

1.14.1

1.14.2

1.15.0

1.15.1

1.16.0

1.16.1

1.16.2

1.16.3

1.17.0

1.18.0

1.19.0

1.2.0

1.20.0

1.21.0

1.22.0

1.22.1

1.22.2

1.23.0

1.23.1

1.24.0

1.25.0

1.25.1

1.25.2

1.26.0

1.27.0

1.28.0

1.28.1

1.29.0

1.29.1

1.29.2

1.3.0

1.30.0

1.30.1

1.30.2

1.30.3

1.30.4

1.30.5

1.31.0

1.32.0

1.32.1

1.32.2

1.32.3

1.32.4

1.32.5

1.32.6

1.32.7

1.33.0

1.33.1

1.33.2

1.34.0

1.34.1

1.34.2

1.34.3

1.35.0

1.35.1

1.35.2

1.35.3

1.35.4

1.35.5

1.35.6

1.35.7

1.35.8

1.36.0

1.4.0

1.5.0

1.6.0

1.6.1

1.7.0

1.8.0

1.9.0

1.9.1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '2d68421f5d'

${ noResults }

vaultwarden/src/api/core

History

tom27052006 fe3111d9b5 Align bulk collection-access authorization with single-collection edit post_bulk_access_collections authorized each requested collection via the legacy Collection::is_manageable_by_user helper, which also accepts a member's membership/group access_all. For a Custom member this diverged from the single-collection edit endpoint (ManagerHeaders -> collection_edit_access), which requires a real per-collection Manage grant and never treats a Custom member's access_all as one. A flagless Custom member placed in an access_all group could therefore rewrite collection user/group assignments in bulk while the single-collection edit endpoint denied the exact same change. Add auth::can_edit_collection - the collection_edit_access + can_manage_collection pair the ManagerHeaders guard already uses - and call it per collection in the bulk-access endpoint. Legacy Managers, Admins/Owners and Edit-any-collection members are unaffected; only a Custom member's access_all shortcut is removed, so bulk-access now enforces exactly what the single-collection edit endpoint does.		1 day ago
..
two_factor	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	2 months ago
accounts.rs	[v2026.5.0] Registration request update (#7295)	2 weeks ago
ciphers.rs	Misc updates and fixes (#7406)	2 weeks ago
emergency_access.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	2 months ago
events.rs	Misc updates and fixes (#7406)	2 weeks ago
folders.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	2 months ago
mod.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	2 months ago
organizations.rs	Align bulk collection-access authorization with single-collection edit	1 day ago
public.rs	Switch to Edition 2024, more clippy lints, and less macro calls (#7200)	2 months ago
sends.rs	2026.6.0 send support (#7346)	2 weeks ago