{"action":"created","issue":{"url":"https://api.github.com/repos/nuxsmin/sysPass/issues/1148","repository_url":"https://api.github.com/repos/nuxsmin/sysPass","labels_url":"https://api.github.com/repos/nuxsmin/sysPass/issues/1148/labels{/name}","comments_url":"https://api.github.com/repos/nuxsmin/sysPass/issues/1148/comments","events_url":"https://api.github.com/repos/nuxsmin/sysPass/issues/1148/events","html_url":"https://github.com/nuxsmin/sysPass/issues/1148","id":385811297,"node_id":"MDU6SXNzdWUzODU4MTEyOTc=","number":1148,"title":"Access to accounts as admin","user":{"login":"deajan","id":4681318,"node_id":"MDQ6VXNlcjQ2ODEzMTg=","avatar_url":"https://avatars1.githubusercontent.com/u/4681318?v=4","gravatar_id":"","url":"https://api.github.com/users/deajan","html_url":"https://github.com/deajan","followers_url":"https://api.github.com/users/deajan/followers","following_url":"https://api.github.com/users/deajan/following{/other_user}","gists_url":"https://api.github.com/users/deajan/gists{/gist_id}","starred_url":"https://api.github.com/users/deajan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deajan/subscriptions","organizations_url":"https://api.github.com/users/deajan/orgs","repos_url":"https://api.github.com/users/deajan/repos","events_url":"https://api.github.com/users/deajan/events{/privacy}","received_events_url":"https://api.github.com/users/deajan/received_events","type":"User","site_admin":false},"labels":[{"id":42908513,"node_id":"MDU6TGFiZWw0MjkwODUxMw==","url":"https://api.github.com/repos/nuxsmin/sysPass/labels/Question","name":"Question","color":"cc317c","default":false},{"id":876579744,"node_id":"MDU6TGFiZWw4NzY1Nzk3NDQ=","url":"https://api.github.com/repos/nuxsmin/sysPass/labels/v3","name":"v3","color":"0052cc","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-11-29T16:12:41Z","updated_at":"2018-11-29T21:07:41Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"**sysPass Version**\r\n3.0-rc5 (also applicable to 2.1.16)\r\n\r\n**Describe the question**\r\nI have some accounts that seem \"lost\" in sysPass (both versions), meaning I know they exist, since I can search them with a `SELECT * FROM account WHERE name LIKE '%pattern%';`, but I can't access them.\r\nUser that created the account told me the group he used.\r\nMy user's primary group is that one, but I can't see the account.\r\nAlso, as admin, I don't see it neither.\r\nI have added my user account to all groups, does not improve the situation.\r\n\r\nGlobal search and Secondary group access are both enabled too.\r\nAdmin is also set as account admin, nothing helps.\r\n\r\nAnything I may have missed ?\r\nMaybe some diag steps I can do ?\r\n\r\nBest regards."},"comment":{"url":"https://api.github.com/repos/nuxsmin/sysPass/issues/comments/442993492","html_url":"https://github.com/nuxsmin/sysPass/issues/1148#issuecomment-442993492","issue_url":"https://api.github.com/repos/nuxsmin/sysPass/issues/1148","id":442993492,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0Mjk5MzQ5Mg==","user":{"login":"vmario89","id":5631071,"node_id":"MDQ6VXNlcjU2MzEwNzE=","avatar_url":"https://avatars1.githubusercontent.com/u/5631071?v=4","gravatar_id":"","url":"https://api.github.com/users/vmario89","html_url":"https://github.com/vmario89","followers_url":"https://api.github.com/users/vmario89/followers","following_url":"https://api.github.com/users/vmario89/following{/other_user}","gists_url":"https://api.github.com/users/vmario89/gists{/gist_id}","starred_url":"https://api.github.com/users/vmario89/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vmario89/subscriptions","organizations_url":"https://api.github.com/users/vmario89/orgs","repos_url":"https://api.github.com/users/vmario89/repos","events_url":"https://api.github.com/users/vmario89/events{/privacy}","received_events_url":"https://api.github.com/users/vmario89/received_events","type":"User","site_admin":false},"created_at":"2018-11-29T21:07:41Z","updated_at":"2018-11-29T21:07:41Z","author_association":"CONTRIBUTOR","body":"hi @deajan ,\r\nthis is a good question! You could do some update query for this to have some \"dirty hack\" which will work. \r\n\r\nBut normally the sysPass-Admin(s) should think about some general usage concept for passwords and groups in the team/group/company. You should ask yourself some questions like \"Who should save what kinds of passwords in a team password manager?\". At first: I never would store private passwords which do not belong to the company for example (make your own instance for such a thing) - because an admin can build some API request to query that password (i think it should be possible, because in syspass v2 you can decrypt all passwords with XML decrypter) or to simply change the owner via database. \r\n\r\nA user in a company should only store passwords which belong to the company. Now these passwords/accounts can either belong to the private-only use of some personalized login (for example a vendor login like mario.voigt@somecompany.de at some third party) or some group-usage (like a team or squad or department which has shared access to something). This way the structure of groups and users should be applied accordingly. This will also lead that you normally should be able to delete the user's account without restoring his private-only passwords because you just won't require them. This also may be some data privacy break by the way if you recover some access of the user which does not belong to you. There's always the diversity between what should/should/must be done and what is not allowed in technical and philosophic way ;)\r\n\r\nHm just some ideas about it :-)"}}
{"actor":{"display_login":"vmario89"}}