diff --git a/src/Api/Controllers/CiphersController.cs b/src/Api/Controllers/CiphersController.cs index 495f940a89..c72b8ea270 100644 --- a/src/Api/Controllers/CiphersController.cs +++ b/src/Api/Controllers/CiphersController.cs @@ -225,10 +225,9 @@ namespace Bit.Api.Controllers } IEnumerable orgCiphers; - if (await _currentContext.OrganizationOwner(orgIdGuid)) + if (await _currentContext.OrganizationAdmin(orgIdGuid)) { - // User may be a Provider for the organization, in which case GetManyByUserIdAsync won't return any results - // But they have access to all organization ciphers, so we can safely get by orgId instead + // Admins, Owners and Providers can access all items even if not assigned to them orgCiphers = await _cipherRepository.GetManyOrganizationDetailsByOrganizationIdAsync(orgIdGuid); } else