"Manager" cannot edit users of a group in an organization #1571

Closed
opened 2026-02-05 01:15:40 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @florian-bellencontre on GitHub (Apr 19, 2023).

Subject of the issue

The "Manager" cannot edit the users of a group in an organization. The description of the role manager says "... and manage access in assigned collections" but yet it has the same rights as a normal user with the addition of the "Organizations" category.

Deployment environment

Diag:
Screenshot from 2023-04-19 14-11-24

  • vaultwarden version: 1.28.1
  • Install method: Installation from releases and with a compilation
  • Clients used: Browser (firefox, chrome)
  • Reverse proxy and version: haproxy

Steps to reproduce

  1. Create an organization
  2. Create a group
  3. Assign a user to the organization and group
  4. Promote to manager rank

Expected behaviour

Display groups and user assignments to groups like this:
Screenshot from 2023-04-19 14-16-19

Actual behaviour

The manager can't manage the users of the groups:
image

Originally created by @florian-bellencontre on GitHub (Apr 19, 2023). ### Subject of the issue The "Manager" cannot edit the users of a group in an organization. The description of the role manager says "... and manage access in assigned collections" but yet it has the same rights as a normal user with the addition of the "Organizations" category. ### Deployment environment Diag: ![Screenshot from 2023-04-19 14-11-24](https://user-images.githubusercontent.com/57491181/233071058-34259441-8101-4541-bf3f-5fa9d6c370f2.png) * vaultwarden version: 1.28.1 * Install method: Installation from releases and with a compilation * Clients used: Browser (firefox, chrome) * Reverse proxy and version: haproxy ### Steps to reproduce 1. Create an organization 2. Create a group 3. Assign a user to the organization and group 4. Promote to manager rank ### Expected behaviour Display groups and user assignments to groups like this: ![Screenshot from 2023-04-19 14-16-19](https://user-images.githubusercontent.com/57491181/233072117-199b5704-5c1e-48e0-a015-6a59ba87267e.png) ### Actual behaviour The manager can't manage the users of the groups: ![image](https://user-images.githubusercontent.com/57491181/233072515-a26e4cec-84be-424d-a725-022ebb2d6d12.png)
Author
Owner

@stefan0xC commented on GitHub (Apr 19, 2023):

A manager will not be able to edit users of a group. If they have access to a collection they should be able to edit who (or which group) has access to that collection. Which works if a manager has been given direct access to an collection.

However it seems like this does not work at the moment for access via groups which is why the groups feature is still considered experimental and not enabled by default.

@stefan0xC commented on GitHub (Apr 19, 2023): A manager will not be able to edit users of a group. If they have access to a collection they should be able to edit who (or which group) has access to that collection. Which works if a manager has been given direct access to an collection. However it seems like this does not work at the moment for access via groups which is why the groups feature is still considered experimental and not enabled by default.
Author
Owner

@Floflobel commented on GitHub (Apr 19, 2023):

I just looked and indeed a manager user can add a group into a collection so no worries on this side.

I see that it is not a Vaultwarden problem. I'm going to look for a feature request or an improvement on Biwarden side.

Thank you very much for your feedback and you can close this issue.

@Floflobel commented on GitHub (Apr 19, 2023): I just looked and indeed a manager user can add a group into a collection so no worries on this side. I see that it is not a Vaultwarden problem. I'm going to look for a feature request or an improvement on Biwarden side. Thank you very much for your feedback and you can close this issue.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/vaultwarden#1571