mirror of
https://github.com/bitwarden/server
synced 2025-12-17 08:43:27 +00:00
Only check assigned collections if lacking privs for all (#1657)
This commit is contained in:
@@ -176,8 +176,7 @@ namespace Bit.Api.Controllers
|
||||
{
|
||||
collection = await _collectionRepository.GetByIdAsync(id);
|
||||
}
|
||||
|
||||
if (await _currentContext.ViewAssignedCollections(orgId))
|
||||
else if (await _currentContext.ViewAssignedCollections(orgId))
|
||||
{
|
||||
collection = await _collectionRepository.GetByIdAsync(id, _currentContext.UserId.Value);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user