From 836c0c56938ed8bb2e826683d03fcee0553cfb16 Mon Sep 17 00:00:00 2001 From: voommen-livefront Date: Wed, 5 Mar 2025 15:17:34 -0600 Subject: [PATCH] PM-18890 permissions issue --- src/Api/Tools/Controllers/ImportCiphersController.cs | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/Api/Tools/Controllers/ImportCiphersController.cs b/src/Api/Tools/Controllers/ImportCiphersController.cs index d6104de354..b0bd60bad6 100644 --- a/src/Api/Tools/Controllers/ImportCiphersController.cs +++ b/src/Api/Tools/Controllers/ImportCiphersController.cs @@ -107,17 +107,17 @@ public class ImportCiphersController : Controller var existingCollections = collections.Where(tc => orgCollectionIds.Contains(tc.Id)); //When importing into existing collection, we need to verify if the user has permissions - if (existingCollections.Any() && !(await _authorizationService.AuthorizeAsync(User, existingCollections, BulkCollectionOperations.ImportCiphers)).Succeeded) + if (existingCollections.Any() && (await _authorizationService.AuthorizeAsync(User, existingCollections, BulkCollectionOperations.ImportCiphers)).Succeeded) { - return false; + return true; }; //Users allowed to import if they CanCreate Collections - if (!(await _authorizationService.AuthorizeAsync(User, collections, BulkCollectionOperations.Create)).Succeeded) + if ((await _authorizationService.AuthorizeAsync(User, collections, BulkCollectionOperations.Create)).Succeeded) { - return false; + return true; } - return true; + return false; } }