Hi Community!
hope you can help me solving a little problem 
I’m using the following KV v2 policy to create a private area for each OIDC user:
## Make the KV visible for all users
path "secret/personal" { capabilities = ["list"] }
## Allow listing all folders within personal
path "secret/personal/+/" { capabilities = ["list"] }
## Allow full access to users private dir including glob for "data/metadata" and sub direcories
path "secret/personal/+/{{identity.entity.aliases.auth_oidc_IDENTIFIER.name}}/+" { capabilities = ["create", "read", "update", "delete", "list"] }
Users can only list/edit their private secret, which works fine and as expected.
The problem starts as soon as users navigate to a path they don’t have access to.
The “View secret” dialog appears and when navigating back to a path one has access to, the dialog persists and secrets are not shown until a refresh of the page via browser.
I’m wondering if this is related to a mistake in my policy or something else possibly?
Thanks a lot in advance!
PS: Disabled proxy cache for nginx, which sits in front of vault.