geforkt von mirrored/vaultwarden
7cf8809d77
This has been requested a few times (#1136 & #246 & forum), and there already were two (1:1 duplicate) PR's (#1222 & #1223) which needed some changes and no followups or further comments unfortunally. This PR adds two auth headers. - ManagerHeaders Checks if the user-type is Manager or higher and if the manager is part of that collection or not. - ManagerHeadersLoose Check if the user-type is Manager or higher, but does not check if the user is part of the collection, needed for a few features like retreiving all the users of an org. I think this is the safest way to implement this instead of having to check this within every function which needs this manually. Also some extra checks if a manager has access to all collections or just a selection. fixes #1136 |
||
|---|---|---|
| .. | ||
| api | ||
| db | ||
| static | ||
| auth.rs | ||
| config.rs | ||
| crypto.rs | ||
| error.rs | ||
| mail.rs | ||
| main.rs | ||
| util.rs | ||