# Restrict the access to the defined path to view - KV engine version 1

**URL:** <https://discuss.hashicorp.com/t/restrict-the-access-to-the-defined-path-to-view-kv-engine-version-1/11604>\
**Category:** Vault\
**Created:** [July 17, 2020, 8:28am UTC](https://discuss.hashicorp.com/t/restrict-the-access-to-the-defined-path-to-view-kv-engine-version-1/11604 "2020-07-17T08:28:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gowrisankar22](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/gowrisankar22/32/4369_2.png) [@gowrisankar22](https://discuss.hashicorp.com/u/gowrisankar22)\
**Post date:** [July 17, 2020, 8:28am UTC](https://discuss.hashicorp.com/t/restrict-the-access-to-the-defined-path-to-view-kv-engine-version-1/11604/1 "2020-07-17T08:28:23Z")

</div>

Hello Experts,

I have a policy like below assigned to a group called group1. The user belongs to group1 should be allowed to view the only team1 path in the UI but now the user able to view all other paths under secretenginev1/ but I want to restrict that.

example:  
team1  
team2  
team3  
team4

group1 user should see only team1 path under secretenginev1  
group2 user should see only team2 path under secretenginev1…etc

```auto
path "secretenginev1/team1/dept/*"
{
  capabilities = ["create", "read", "update", "delete", "list"]
}

path "secretenginev1/*"
{
  capabilities = ["list"]
}

# Allow a token to look up its own capabilities on a path
path "sys/capabilities-self" {
    capabilities = ["update"]
}

path "auth/token/create" {
  capabilities=["update", "sudo"]
}

```

Can you help me how can i achieve this ?

---

<div class="post-metadata">

**Author:** ![Wolfsrudel](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/wolfsrudel/32/28465_2.png) [@Wolfsrudel](https://discuss.hashicorp.com/u/Wolfsrudel)\
**Post date:** [July 17, 2020, 8:16pm UTC](https://discuss.hashicorp.com/t/restrict-the-access-to-the-defined-path-to-view-kv-engine-version-1/11604/2 "2020-07-17T20:16:55Z")

</div>

Remove the

```auto
path "secretenginev1/*"
{
  capabilities = ["list"]
}

```

and try again.

---

<div class="post-metadata">

**Author:** ![gowrisankar22](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/gowrisankar22/32/4369_2.png) [@gowrisankar22](https://discuss.hashicorp.com/u/gowrisankar22)\
**Post date:** [July 18, 2020, 12:55pm UTC](https://discuss.hashicorp.com/t/restrict-the-access-to-the-defined-path-to-view-kv-engine-version-1/11604/3 "2020-07-18T12:55:07Z")

</div>

@Wolfsrudel nope it won’t work if I remove it … I can’t list from ui and will get 401