add group support for Cipher::get_collections()

[stefan0xC]

join group infos assigned to a collection to check whether user has been given access to all collections via any group or they have access to a specific collection via any group membership

fixes #4588

[BlackDex]

omg, those queries aren't getting any prettier haha.

[stefan0xC]

I've tested it a bit with some edge cases and I don't think this currently works correctly.

[BlackDex]

I actually think we should redesign the whole group database storage. Currently we use the exact same logic to store it as Bitwarden. But Bitwarden has some programmable logic which we do not. Not sure actually how they solved this with there SQLite implementation.

[stefan0xC]

To fix the issues I've encountered I had to add even more queries. 😅
(I'll take a look at the expected return values next.)

[stefan0xC]

As far as I've tested it, this should now work as intended but I've not tested every possible combination of access rights and collection assignments so I might have missed something (hopefully not something obvious 😳 ).

[jb2barrels]

@stefan0xC Question for you.
Does this change also fix the Bitwarden browser extension from showing that a password entry collection can be revoked from an entry as a user (when the user shouldn't have that permission) ?

[stefan0xC]

@jb2barrels Not sure if this is related. Is this a visual bug (where it only seems possible but it actually isn't) or can entries actually be changed without write access to a collection?

[jb2barrels]

The extension will show the change was made to the password entries' collections.
But upon the next sync made by the extension, the changes are reverted client side (eg the change never actually happens on the server).

I'm wondering if it has anything to do with the client receiving a response (or empty response) thinking its successful, when the user did not have permission.

[stefan0xC]

I'm not sure I can replicate your issue. Even without my changes I get an error (Cipher is not write accessible) when I try to change the assigned collections of a cipher in the browser extension when I don't actually have write permission to the collection.