Skip to content

Allow groups to restrict by browser integration key (#6437)#9852

Merged
droidmonkey merged 1 commit intokeepassxreboot:developfrom
ekimd:restrict_browser_key
Jan 14, 2024
Merged

Allow groups to restrict by browser integration key (#6437)#9852
droidmonkey merged 1 commit intokeepassxreboot:developfrom
ekimd:restrict_browser_key

Conversation

@ekimd
Copy link
Copy Markdown
Contributor

@ekimd ekimd commented Sep 18, 2023

Relates to issue #6437

This branch adds the ability to set a browser restriction on groups. This allows a given group tree to be visible only to a specific browser. Previously, the workaround was to have separate databases for each browser. However, this can become cumbersome under situations where someone may have a dozen or more browsers that each have to be unlocked whenever the screensaver activates.

Screenshots

image

Testing strategy

  • Added a new test function to test the new behavior

Type of change

  • ✅ New feature (change that adds functionality)

@ekimd ekimd force-pushed the restrict_browser_key branch 3 times, most recently from 42fbf09 to cdcea83 Compare September 18, 2023 04:26
@droidmonkey droidmonkey added this to the v2.8.0 milestone Sep 18, 2023
@ekimd ekimd force-pushed the restrict_browser_key branch 2 times, most recently from 2b64b4e to 6ffdaf2 Compare October 9, 2023 04:05
@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Oct 9, 2023

@droidmonkey I don't understand the codecov/patch failure--what do I need to do to fix that?
Thanks

@droidmonkey
Copy link
Copy Markdown
Member

We set an ideal threshold for new code introduced to be 75% covered by unit tests. It's optional though.

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Oct 31, 2023

Thanks. I tried increasing the test coverage but couldn't find a clear path given that some of the parent functions in BrowserService aren't tested.

How do I request a code review?

@varjolintu
Copy link
Copy Markdown
Member

Could you solve the conflicts? Rebase the branch.

@ekimd ekimd force-pushed the restrict_browser_key branch from 6ffdaf2 to 3bf086e Compare October 31, 2023 17:55
@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Oct 31, 2023

Rebase complete

@varjolintu
Copy link
Copy Markdown
Member

Some of the code could be cleaned a little bit. For example:

  • Use QStringList instead if QList<QString> if possible.
  • Use auto instead of QString when creating a new variable.
  • Return {} instead of QString().
  • If function parameter has a default value, use {} again.

@ekimd ekimd force-pushed the restrict_browser_key branch from 3bf086e to 453b2d0 Compare October 31, 2023 18:42
@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Oct 31, 2023

Thanks for the fast response!

I think I caught them all, but let me know if there's anything else. I couldn't return {} in BroswerService.cpp:996 because I got a compiler error returning an initializer list from that lambda function.

@ekimd ekimd force-pushed the restrict_browser_key branch from 453b2d0 to a5d3cbb Compare October 31, 2023 18:51
@varjolintu
Copy link
Copy Markdown
Member

Tested this, and it works nicely. Only thing that caught my eye is the strange separator in the combobox:
Screenshot 2023-11-01 at 7 01 48

When looking at other comboboxes, the separators look much more smaller:
Screenshot 2023-11-01 at 7 01 30

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Nov 1, 2023

Interesting. I think that's because the screenshot above is actually referencing a QMenu not a ComboBox (see EditWidgetIcons.cpp:170).

@varjolintu varjolintu self-requested a review November 4, 2023 08:01
Copy link
Copy Markdown
Member

@varjolintu varjolintu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. We are missing a combobox separator style, but the scope is outside of this PR.

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Nov 10, 2023

Anything else I need to do to get approval on this?

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Nov 21, 2023

bump

@varjolintu
Copy link
Copy Markdown
Member

bump

Bump? This PR is already accepted.

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Dec 7, 2023

Going to need some help here. There was a merge conflict so I resolved that but now one of the unit tests is failing and I'm not sure why. (It seems unrelated)

@droidmonkey
Copy link
Copy Markdown
Member

droidmonkey commented Dec 7, 2023

You can ignore, we have sporadic failures since some tests rely on randomness and infrequently don't produce the expected results.

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Dec 7, 2023

Since I'm not familiar with the development cadence for this project, what is the typical timeline/workflow between approval, review, and merge?

@droidmonkey
Copy link
Copy Markdown
Member

I will merge it in when I get the chance. Unfortunately my time is very limited lately.

@droidmonkey droidmonkey merged commit 884386c into keepassxreboot:develop Jan 14, 2024
@droidmonkey droidmonkey modified the milestones: v2.8.0, v2.7.10 Nov 28, 2024
@droidmonkey droidmonkey added the pr: backported Pull request backported to previous release label Dec 22, 2024
@droidmonkey droidmonkey modified the milestones: v2.7.10, v2.7.11 Jun 19, 2025
dragonekii pushed a commit to dragonekii/keepassxc-custom that referenced this pull request Dec 8, 2025
Release 2.7.11 (2025-11-23)

- Add image, HTML, Markdown preview, and text editing support to inline attachment viewer [keepassxreboot#12085, keepassxreboot#12244, keepassxreboot#12654]
- Add database merge confirmation dialog [keepassxreboot#10173]
- Add option to auto-generate a password for new entries [keepassxreboot#12593]
- Add support for group sync in KeeShare [keepassxreboot#11593]
- Add {UUID} placeholder for use in references [keepassxreboot#12511]
- Add “Wait for Enter” search option [keepassxreboot#12263]
- Add keyboard shortcut to “Jump to Group” from search results [keepassxreboot#12225]
- Add predefined search for TOTP entries [keepassxreboot#12199]
- Add confirmation when closing database via ESC key [keepassxreboot#11963]
- Add support for escaping placeholder expressions [keepassxreboot#11904]
- Reduce tab indentation width in notes fields [keepassxreboot#11919]
- Cap default Argon2 parallelism when creating a new database [keepassxreboot#11853]
- Database lock after inactivity now enabled by default and set to 900 seconds [keepassxreboot#12689, keepassxreboot#12609]
- Copying TOTP now opens setup dialog if none is configured for entry [keepassxreboot#12584]
- Make double click action configurable [keepassxreboot#12322]
- Remove unused “Last Accessed” from GUI [keepassxreboot#12602]
- Auto-Type: Add more granular confirmation settings [keepassxreboot#12370]
- Auto-Type: Add URL typing preset and add copy options to menu [keepassxreboot#12341]
- Browser: Do not allow sites automatically if entry added from browser extension [keepassxreboot#12413]
- Browser: Add options to restrict exposed groups [keepassxreboot#9852, keepassxreboot#12119]
- Bitwarden Import: Add support for timestamps and password history [keepassxreboot#12588]
- macOS: Add Liquid Glass icon [keepassxreboot#12642]
- macOS: Remove theme-based menubar icon toggle [keepassxreboot#12685]
- macOS: Add Window and Help menus [keepassxreboot#12357]
- Windows: Add option to add KeePassXC to PATH during installation [keepassxreboot#12171]

- Fix window geometry not being restored properly when KeePassXC starts in tray [keepassxreboot#12683]
- Fix potential database truncation when using direct write save method with YubiKeys [keepassxreboot#11841]
- Fix issue with database backup saving [keepassxreboot#11874]
- Fix UI lockups during startup with multiple tabs [keepassxreboot#12053]
- Fix keyboard shortcuts when menubar is hidden [keepassxreboot#12431]
- Fix clipboard being cleared on exit even if no password was copied [keepassxreboot#12603]
- Fix single-instance detection when username contains invalid filename characters [keepassxreboot#12559]
- Fix “Search Wait for Enter” setting not being save [keepassxreboot#12614]
- Fix hotkey accelerators not being escaped properly on database tabs [keepassxreboot#12630]
- Fix confusing error if user cancels out of key file edit dialog [keepassxreboot#12639]
- Fix issues with saved searches and “Press Enter to Search” option [keepassxreboot#12314]
- Fix URL wildcard matching [keepassxreboot#12257]
- Fix TOTP visibility on unlock and settings change [keepassxreboot#12220]
- Fix KeeShare entries with reference attributes not updating [keepassxreboot#11809]
- Fix sort order not being maintained when toggling filters in database reports [keepassxreboot#11849]
- Fix several UI font and layout issues [keepassxreboot#11967,  keepassxreboot#12102]
- Prevent mouse wheel scroll on edit username field [keepassxreboot#12398]
- Improve base translation consistency [keepassxreboot#12432]
- Improve inactivity timer [keepassxreboot#12246]
- Documentation improvements [keepassxreboot#12373, keepassxreboot#12506]
- Browser: Fix ordering of clientDataJSON in Passkey response object [keepassxreboot#12120]
- Browser: Fix URL matching for additional URLs [keepassxreboot#12196]
- Browser: Fix group settings inheritance [keepassxreboot#12368]
- Browser: Allow read-only native messaging config files [keepassxreboot#12236]
- Browser: Optimise entry iteration in browser access control dialog [keepassxreboot#11817]
- Browser: Fix “Do not ask permission for HTTP Basic Auth” option [keepassxreboot#11871]
- Browser: Fix native messaging path for Tor Browser launcher on Linux [keepassxreboot#12005]
- Auto-Type: Fix empty window behaviour [keepassxreboot#12622]
- Auto-Type: Take delays into account when typing TOTP [keepassxreboot#12691]
- SSH Agent: Fix out-of-memory crash with malformed SSH keys [keepassxreboot#12606]
- CSV Import: Fix modified and creation time import [keepassxreboot#12379]
- CSV Import: Fix duplication of root groups on import [keepassxreboot#12240]
- Proton Pass Import: Fix email addresses not being imported when no username set [keepassxreboot#11888]
- macOS: Fix secure input getting stuck [keepassxreboot#11928]
- Windows: Prevent launch as SYSTEM user from MSI installer [keepassxreboot#12705]
- Windows: Remove broken check for MSVC Redistributable from MSI installer [keepassxreboot#11950]
- Linux: Fix startup delay due to StartupNotify setting in desktop file [keepassxreboot#12306]
- Linux: Fix memory initialisation when --pw-stdin is used with a pipe [keepassxreboot#12050]
@yoris
Copy link
Copy Markdown

yoris commented Jan 7, 2026

This option is very useful but it wasn't included in 2.7.11 as well.

@ekimd
Copy link
Copy Markdown
Contributor Author

ekimd commented Jan 7, 2026 via email

@yoris
Copy link
Copy Markdown

yoris commented Jan 8, 2026

All looks good—the option exists. Apologies—I was searching in the incorrect section of the UI settings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature: Browser pr: backported Pull request backported to previous release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants