[PM-11162] Assign To Collections Permission Update

apps/desktop/src/vault/app/vault/collections.component.html

@@ -21,6 +21,7 @@ <h1 class="box-header" id="collectionsTitle">
                 type="checkbox"
                 [(ngModel)]="$any(c).checked"
                 name="Collection[{{ i }}].Checked"
+                [disabled]="!canAssignCollections"
               />
             </div>
           </div>

apps/web/src/app/vault/components/vault-items/vault-cipher-row.component.ts

@@ -35,6 +35,7 @@ export class VaultCipherRowComponent implements OnInit {
   @Input() collections: CollectionView[];
   @Input() viewingOrgVault: boolean;
   @Input() canEditCipher: boolean;
+  @Input() canAssignCollections: boolean;
 
   @Output() onEvent = new EventEmitter<VaultItemEvent>();
 
@@ -71,7 +72,7 @@ export class VaultCipherRowComponent implements OnInit {
   }
 
   protected get showAssignToCollections() {
-    return this.canEditCipher && !this.cipher.isDeleted;
+    return this.canAssignCollections && !this.cipher.isDeleted;
   }
 
   protected get showClone() {

apps/web/src/app/vault/components/vault-items/vault-items.component.html

@@ -123,6 +123,7 @@
           [collections]="allCollections"
           [checked]="selection.isSelected(item)"
           [canEditCipher]="canEditCipher(item.cipher)"
+          [canAssignCollections]="canAssignCollections(item.cipher)"
           (checkedToggled)="selection.toggle(item)"
           (onEvent)="event($event)"
         ></tr>

apps/web/src/app/vault/components/vault-items/vault-items.component.ts

@@ -198,6 +198,18 @@
     return (organization.canEditAllCiphers && this.viewingOrgVault) || cipher.edit;
   }
 
+  protected canAssignCollections(cipher: CipherView) {
+    if (cipher.organizationId == null) {
+      return true;
+    }
+
+    const organization = this.allOrganizations.find((o) => o.id === cipher.organizationId);
+    return (
+      (organization.canEditAllCiphers && this.viewingOrgVault) ||
+      (cipher.edit && cipher.viewPassword)
+    );
+  }
+
   private refreshItems() {
     const collections: VaultItem[] = this.collections.map((collection) => ({ collection }));
     const ciphers: VaultItem[] = this.ciphers.map((cipher) => ({ cipher }));

libs/angular/src/admin-console/components/collections.component.ts

@@ -25,6 +25,9 @@
   collections: CollectionView[] = [];
   organization: Organization;
 
+  // Using to disable collections edit in desktop unless user has "Can Manage" or "Can Edit" permissions
+  canAssignCollections: boolean;
+
   protected cipherDomain: Cipher;
 
   constructor(
@@ -52,7 +55,7 @@
       await this.cipherService.getKeyForCipherKeyDecryption(this.cipherDomain, activeUserId),
     );
     this.collections = await this.loadCollections();
-
+    this.subscribeAssignCollectionsCheck(this.cipher);
     this.collections.forEach((c) => ((c as any).checked = false));
     if (this.collectionIds != null) {
       this.collections.forEach((c) => {
@@ -65,6 +68,16 @@
     }
   }
 
+  protected subscribeAssignCollectionsCheck(cipher: CipherView): void {
+    if (cipher?.organizationId == null) {
+      this.canAssignCollections = true;
+    }
+
+    this.organizationService.get$(cipher.organizationId).subscribe((org) => {
+      this.canAssignCollections = org.canEditAllCiphers || (cipher.edit && cipher.viewPassword);
+    });
+  }
+
   async submit(): Promise<boolean> {
     const selectedCollectionIds = this.collections
       .filter((c) => {

libs/vault/src/cipher-form/components/item-details/item-details-section.component.ts

@@ -213,6 +213,10 @@ export class ItemDetailsSectionComponent implements OnInit {
         (this.originalCipherView.collectionIds as CollectionId[]),
     );
 
+    if (!(this.originalCipherView?.edit && this.originalCipherView?.viewPassword)) {
+      this.itemDetailsForm.controls.collectionIds.disable();
+    }
+
     if (this.partialEdit) {
       this.itemDetailsForm.disable();
       this.itemDetailsForm.controls.favorite.enable();