Organization items shows up in My Vault even when no access #1627

New Issue

OVERLORD · 2025-10-09T17:23:09+03:00

OVERLORD commented

2025-10-09 17:23:09 +03:00

Originally created by @assid2 on GitHub.

Subject of the issue

If you disable the collection from a user EVEN owner, then the items of the organization should not show up in "My Vault". The owner must go to the organization's vault to see the items

Your environment

Bitwarden_rs version: 1.16.3

Install method: Docker latest/postgresql
Clients used:
Reverse proxy and version:
Version of mysql/postgresql: postgresql
Other relevant information:

Steps to reproduce

N/A

Expected behaviour

Organization Vault details should not show up in "My Vault" for owners, if the the checkbox for the collection has not been enabled to them.. If they still need to access the information, they can go to the organization vault.

Actual behaviour

make 2 owners.. then for yourself.. set it to : This user can access only the selected collections.
and remove access to the collection. Once you do this the collection should not show up in your vault and you should have to go to the organizations vault

Relevant logs

Originally created by @assid2 on GitHub.  ### Subject of the issue  If you disable the collection from a user EVEN owner, then the items of the organization should not show up in "My Vault". The owner must go to the organization's vault to see the items ### Your environment  * Bitwarden_rs version: 1.16.3  * Install method: Docker latest/postgresql * Clients used:  * Reverse proxy and version:  * Version of mysql/postgresql: postgresql * Other relevant information: ### Steps to reproduce  N/A ### Expected behaviour  Organization Vault details should not show up in "My Vault" for owners, if the the checkbox for the collection has not been enabled to them.. If they still need to access the information, they can go to the organization vault. ### Actual behaviour  make 2 owners.. then for yourself.. set it to : This user can access only the selected collections. and remove access to the collection. Once you do this the collection should not show up in your vault and you should have to go to the organizations vault ### Relevant logs

OVERLORD closed this issue

2025-10-09 17:23:10 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1627