mirror of
https://github.com/bitwarden/browser
synced 2025-12-13 23:03:32 +00:00
[PM-19357] - [Defect] Unauthorised access allows limited access user to change custom hidden field of Items (#14068)
* update tests * finish tests * only disallow hidden fields for hiddenPassword users * fix failing tests * fix story * only disable hidden field option when editing
This commit is contained in:
@@ -89,7 +89,7 @@
|
||||
bitIconButton="bwi-pencil-square"
|
||||
class="tw-self-center tw-mt-2"
|
||||
data-testid="edit-custom-field-button"
|
||||
*ngIf="!isPartialEdit"
|
||||
*ngIf="canEdit(field.value.type)"
|
||||
></button>
|
||||
|
||||
<button
|
||||
@@ -100,7 +100,7 @@
|
||||
[appA11yTitle]="'reorderToggleButton' | i18n: field.value.name"
|
||||
(keydown)="handleKeyDown($event, field.value.name, i)"
|
||||
data-testid="reorder-toggle-button"
|
||||
*ngIf="!isPartialEdit"
|
||||
*ngIf="canEdit(field.value.type)"
|
||||
></button>
|
||||
</div>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user