Feature Request: User-based Permissions for “Send” Feature

[rahizzle]

(This is a repost of this issue since I imagine this is a better place for it)

Currently, enabling and disabling the “Send” feature is a binary option that applies to all users. For safety and security reasons, it would be beneficial to have user-based permissions for the “Send” feature. This would allow administrators to specify which users are allowed to use the “Send” feature. I’d be willing to sponsor this feature to get it done faster.

Benefits
Enhanced security by limiting the use of the “Send” feature to specific users.
Increased control for administrators over feature usage.
Improved compliance with organizational policies and security protocols.

Suggested Integration Plan:
Introduce user-based permissions for the “Send” feature, allowing administrators to control which users can access and utilize this functionality from the admin panel.

Add user-based “Send” feature permissions

• Implement functionality to assign “Send” feature permissions to individual users.
• Test API security

Add an updated user-based “Send” feature to the admin panel

• Update the admin panel to include controls for managing user-based “Send” feature permissions.
• Provide clear documentation and user interface for administrators to easily enable or disable the “Send” feature on a per-user basis.

Add detailed error messaging for the audit logs.

• For example: Instead of having only the status code (404 not found) we should have more granularity for what the error is (404 not found: description of error + potential solution)

[rahizzle]

Discussed in private chat, not part of Vault Warden roadmap