[PM-11162] Assign To Collections Permission Update

apps/desktop/src/vault/app/vault/collections.component.html

@@ -21,6 +21,7 @@ <h1 class="box-header" id="collectionsTitle">
                 type="checkbox"
                 [(ngModel)]="$any(c).checked"
                 name="Collection[{{ i }}].Checked"
+                [disabled]="!cipher.canEditWithPassword"
               />
             </div>
           </div>

apps/web/src/app/vault/components/vault-items/vault-cipher-row.component.ts

@@ -40,6 +40,7 @@ export class VaultCipherRowComponent implements OnInit {
   @Input() collections: CollectionView[];
   @Input() viewingOrgVault: boolean;
   @Input() canEditCipher: boolean;
+  @Input() canAssignCollections: boolean;
   @Input() canManageCollection: boolean;
 
   @Output() onEvent = new EventEmitter<VaultItemEvent>();
@@ -92,7 +93,7 @@ export class VaultCipherRowComponent implements OnInit {
   }
 
   protected get showAssignToCollections() {
-    return this.canEditCipher && !this.cipher.isDeleted;
+    return this.canAssignCollections && !this.cipher.isDeleted;
   }
 
   protected get showClone() {

apps/web/src/app/vault/components/vault-items/vault-items.component.html

@@ -118,6 +118,7 @@
           [collections]="allCollections"
           [checked]="selection.isSelected(item)"
           [canEditCipher]="canEditCipher(item.cipher)"
+          [canAssignCollections]="canAssignCollections(item.cipher)"
           [canManageCollection]="canManageCollection(item.cipher)"
           (checkedToggled)="selection.toggle(item)"
           (onEvent)="event($event)"

apps/web/src/app/vault/components/vault-items/vault-items.component.ts

@@ -227,6 +227,14 @@
     return (organization.canEditAllCiphers && this.viewingOrgVault) || cipher.edit;
   }
 
+  protected canAssignCollections(cipher: CipherView) {
+    if (cipher.organizationId == null) {
+      return true;
+    }
+    const organization = this.allOrganizations.find((o) => o.id === cipher.organizationId);
+    return (organization.canEditAllCiphers && this.viewingOrgVault) || cipher.canEditWithPassword;
+  }
+
   protected canManageCollection(cipher: CipherView) {
     // If the cipher is not part of an organization (personal item), user can manage it
     if (cipher.organizationId == null) {

libs/angular/src/admin-console/components/collections.component.ts

@@ -52,7 +52,6 @@ export class CollectionsComponent implements OnInit {
       await this.cipherService.getKeyForCipherKeyDecryption(this.cipherDomain, activeUserId),
     );
     this.collections = await this.loadCollections();
-
     this.collections.forEach((c) => ((c as any).checked = false));
     if (this.collectionIds != null) {
       this.collections.forEach((c) => {

libs/common/src/vault/models/view/cipher.view.ts

@@ -132,6 +132,10 @@ export class CipherView implements View, InitializerMetadata {
     );
   }
 
+  get canEditWithPassword(): boolean {
+    return this.edit && this.viewPassword;
+  }
+
   linkedFieldValue(id: LinkedIdType) {
     const linkedFieldOption = this.linkedFieldOptions?.get(id);
     if (linkedFieldOption == null) {

libs/vault/src/cipher-form/components/item-details/item-details-section.component.ts

@@ -213,6 +213,10 @@ export class ItemDetailsSectionComponent implements OnInit {
         (this.originalCipherView.collectionIds as CollectionId[]),
     );
 
+    if (!(this.originalCipherView?.edit && this.originalCipherView?.viewPassword)) {
+      this.itemDetailsForm.controls.collectionIds.disable();
+    }
+
     if (this.partialEdit) {
       this.itemDetailsForm.disable();
       this.itemDetailsForm.controls.favorite.enable();