nhyatt/bitwarden
1
0
Fork 0
mirror of https://github.com/bitwarden/server.git synced 2025-04-21 04:55:08 -05:00
Code

Merge branch 'experiment/authorize-attribute' of https://github.com/bitwarden/server into experiment/authorize-attribute

Browse Source
This commit is contained in:
Thomas Rittson 2025-04-09 10:33:40 +10:00
commit 336228e3b4
No known key found for this signature in database
GPG Key ID: CDDDA03861C35E27
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/Api/AdminConsole/Authorization/Requirements/ManageUsersRequirement.cs
View File

@ -7,11 +7,14 @@ namespace Bit.Api.AdminConsole.Authorization.Requirements;
public class ManageUsersRequirement : IOrganizationRequirement public class ManageUsersRequirement : IOrganizationRequirement
{ {
public async Task<bool> AuthorizeAsync( public async Task<bool> AuthorizeAsync(
CurrentContextOrganization? organizationClaims, CurrentContextOrganization? organizationClaims,
Func<Task<bool>> isProviderUserForOrg) Func<Task<bool>> isProviderUserForOrg)
=> organizationClaims is => organizationClaims switch
{ Type: OrganizationUserType.Owner or OrganizationUserType.Admin } or {
{ Permissions.ManageUsers: true } { Type: OrganizationUserType.Owner } => true,
|| await isProviderUserForOrg(); { Type: OrganizationUserType.Admin } => true,
{ Permissions.ManageUsers: true } => true,
_ => await isProviderUserForOrg()
};
} }