[PM-17732] initial thoughts on how to determine if the user has actual can manage…

[cd-bitwarden]

… permissions on a cipher they are trying to delete

🎟️ Tracking

📔 Objective

📸 Screenshots

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Checkmarx One – Scan Summary & Details – 4f32e9a4-8704-4bf3-86ab-d719f817b1b7

Fixed Issues (228)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CSRF	/src/Billing/Controllers/StripeController.cs: 176
	CSRF	/src/Api/Tools/Controllers/OrganizationExportController.cs: 53
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 982
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 989
	CSRF	/src/Billing/Controllers/StripeController.cs: 164
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 649
	CSRF	/src/Api/Auth/Controllers/TwoFactorController.cs: 108
	CSRF	/src/Api/Auth/Controllers/TwoFactorController.cs: 406
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 764
	CSRF	/src/Billing/Controllers/RecoveryController.cs: 38
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 914
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 513
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 236
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 366
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 497
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 493
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 937
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 261
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 320
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 391
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 163
	CSRF	/src/Api/Controllers/SettingsController.cs: 36
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 545
	CSRF	/src/Api/Billing/Controllers/InvoicesController.cs: 16
	CSRF	/src/Api/Controllers/LicensesController.cs: 44
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 659
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 659
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 659
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 659
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1153
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1153
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1153
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 563
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 106
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1050
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1076
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1099
	CSRF	/src/Api/Billing/Controllers/OrganizationsController.cs: 110
	CSRF	/src/Api/Billing/Controllers/OrganizationsController.cs: 52
	CSRF	/src/Identity/Controllers/SsoController.cs: 41
	CSRF	/src/Api/SecretsManager/Controllers/AccessPoliciesController.cs: 266
	CSRF	/src/Api/Public/Controllers/CollectionsController.cs: 64
	CSRF	/src/Api/Controllers/SelfHosted/SelfHostedOrganizationLicensesController.cs: 51
	CSRF	/src/Api/Controllers/CollectionsController.cs: 247
	CSRF	/src/Api/Controllers/CollectionsController.cs: 128
	CSRF	/src/Api/Controllers/CollectionsController.cs: 119
	CSRF	/src/Api/Controllers/CollectionsController.cs: 99
	CSRF	/src/Api/Controllers/CollectionsController.cs: 61
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 142
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 126
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 114
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 75
	CSRF	/src/Api/AdminConsole/Controllers/ProvidersController.cs: 72
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 240
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 167
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 100
	CSRF	/src/Api/Controllers/CollectionsController.cs: 143
	CSRF	/src/Api/Controllers/CollectionsController.cs: 171
	CSRF	/src/Api/Public/Controllers/CollectionsController.cs: 87
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 630
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 609
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 609
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 630
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 630
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 630
	CSRF	/src/Api/SecretsManager/Controllers/AccessPoliciesController.cs: 266
	CSRF	/src/Api/AdminConsole/Controllers/ProvidersController.cs: 72
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 609
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 609
	CSRF	/src/Admin/AdminConsole/Controllers/ProvidersController.cs: 450
	CSRF	/src/Api/AdminConsole/Controllers/GroupsController.cs: 164
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 238
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 392
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 392
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 625
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 696
	CSRF	/src/Api/Controllers/SelfHosted/SelfHostedOrganizationLicensesController.cs: 51
	CSRF	/src/Api/AdminConsole/Public/Controllers/OrganizationController.cs: 42
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 142
	CSRF	/src/Api/Public/Controllers/CollectionsController.cs: 64
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 124
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 127
	CSRF	/src/Api/Controllers/CollectionsController.cs: 128
	CSRF	/src/Api/Controllers/CollectionsController.cs: 119
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 264
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 360
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 377
	CSRF	/src/Api/Controllers/CollectionsController.cs: 99
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/UsersController.cs: 47
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 100
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 167
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 110
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 480
	CSRF	/src/Admin/AdminConsole/Controllers/OrganizationsController.cs: 375
	CSRF	/src/Admin/AdminConsole/Controllers/ProvidersController.cs: 375
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 347
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 347
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 173
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1099
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1099
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 586
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1076
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1076
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 220
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 997
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 959
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 361
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 854
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 104
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1133
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 209
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 855
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 192
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 777
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 840
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1050
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 1050
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 175
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 188
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 220
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 573
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 573
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 586
	CSRF	/src/Api/AdminConsole/Public/Controllers/MembersController.cs: 173
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 158
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 143
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 173
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 927
	CSRF	/bitwarden_license/src/Scim/Controllers/v2/GroupsController.cs: 94
	CSRF	/src/Api/AdminConsole/Public/Controllers/GroupsController.cs: 133
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 292
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 192
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 815
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 751
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 292
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 708
	CSRF	/src/Api/Controllers/CollectionsController.cs: 247
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 392
	CSRF	/src/Identity/Controllers/SsoController.cs: 41
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 737
	CSRF	/src/Api/Vault/Controllers/CiphersController.cs: 192
	CSRF	/bitwarden_license/src/Sso/Controllers/AccountController.cs: 240
	CSRF	/src/Admin/AdminConsole/Controllers/ProvidersController.cs: 408
	CSRF	/src/Admin/AdminConsole/Controllers/ProvidersController.cs: 432
	CSRF	/src/Api/Controllers/CollectionsController.cs: 61
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 204
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 271
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 344
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 407
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 474
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs: 306
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 75
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 114
	CSRF	/src/Api/AdminConsole/Controllers/ProviderUsersController.cs: 126
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 545
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 579
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 723
	CSRF	/src/Api/Auth/Controllers/AccountsController.cs: 746

More results are available on the CxOne platform