new organisation owner unable to view passwords

[floh96]

Issue:
After updating Vaultwarden to version 1.33.0-663f88e7, a newly added owner of the organization is unable to see the organization's passwords.

Reproduction Steps:

1. Update Vaultwarden to version 1.33.0-663f88e7.
2. Invite a new member as an owner to the organization.
3. After the invitation process is complete, the new owner cannot see any passwords.

Note: Existing owners can still view and edit all passwords after the update.

[stefan0xC]

Has the new Owner access to all collections or do they not even show up in the Admin Console?

[BlackDex]

Old owners/admins/mangers had an option to grant access-all.
This feature is removed from Bitwarden as a per user setting.

Admins and Owners have access to all collections and groups by default via the Web-Vault Admin Console.

You need to grant that specific user either individual rights on each collection so that they show-up in the Web-Vault Password Manager. Or create a group special for Admins, and grant the new admin access to that group.

The reason for this is that and Admin will not see all passwords from all organization in the Password Manager view. But just simply his own passwords, and, if selected they can add view or can manage rights to specific collections if they want or need too.

So TLDR:

• Admins/Owners can access all collections via the Admin Console View.
• Admins/Owners can selectively show a collection on there Password Manager View.

[stefan0xC]

With access_all still set:

After editing and saving the Owner this turns into:

[BlackDex]

Yes, you need to add specific can manage or whatever to that user.

[floh96]

If there are lots of new collections, the collections need to be assigned to the group or users every time after creation.
A bit annoying but okay.
Thanks for the quick replies.

[BlackDex]

That is only if those owners/admins want to see that on the Password View. Else they can see all the passwords anyway via the Admin View.

[Rainson12]

Would it be possible to migrate all old users who had the flag enabled since its otherwise not possible to disable it for a user.

[stefan0xC]

If you edit and save an existing Admin/Owner with the current web-vault it will be automatically disabled. Cf. #5493 (reply in thread)

[Rainson12]

thanks, good to know!