mirror of
https://github.com/bitwarden/server
synced 2025-12-17 08:43:27 +00:00
Only check assigned collections if lacking privs for all (#1657)
This commit is contained in:
@@ -176,8 +176,7 @@ namespace Bit.Api.Controllers
|
|||||||
{
|
{
|
||||||
collection = await _collectionRepository.GetByIdAsync(id);
|
collection = await _collectionRepository.GetByIdAsync(id);
|
||||||
}
|
}
|
||||||
|
else if (await _currentContext.ViewAssignedCollections(orgId))
|
||||||
if (await _currentContext.ViewAssignedCollections(orgId))
|
|
||||||
{
|
{
|
||||||
collection = await _collectionRepository.GetByIdAsync(id, _currentContext.UserId.Value);
|
collection = await _collectionRepository.GetByIdAsync(id, _currentContext.UserId.Value);
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user