Vault policies - no permissions error

Vault
1

Hi,
I had issues with granting access to a vault secret path.
my secret path is inside this folder:
secret/data/project1/group1/
I have my policy as:

path “secret/data/project1/group1/*” {

capabilities = [“read”, “list”]

}

I have atttached this policy to group1 LDAP.
when I login I can see the secret/ folder. however when I try to access it it gives me permission denied.
I am using kv v2 engine.
I also tried to add /data to my root path like below, still no luck:

path “secret/data/data/project1/group1/*” {

capabilities = [“read”, “list”]

}

it works if I put * at the root level(below) but this is not what I am looking for since there are different project folder within the root.
path “secret/*” {

capabilities = [“read”, “list”]

}

any suggestions?

2

“Login” meaning the Ui?

You will need the list capability for the metadata path, not the data

path “secret/metadata/data/project1/group1/*” {
  capabilities = [“list”]
}
3

hi Wolf,
yes from the UI.
it still gives me no permission after I click on secret.
so the structure is : secret -> data/data1/data2 ->project1(inside data)-> group1/

I am trying policy as :
path “secret/metadata/data/project1/group1/*” {

capabilities = [“list”]

}

still in the UI when I click on the root level secret, right after this I see no permissions.