Be explicit about trailing slash on paths for list capability (#4793)

This commit is contained in:
Calvin Leung Huang 2018-06-19 12:10:39 -04:00 committed by Jeff Mitchell
parent d37f75efd8
commit 418513bbd9
1 changed files with 2 additions and 1 deletions

View File

@ -163,7 +163,8 @@ and **is not a regular expression**!
When providing `list` capability, it is important to note that since listing
always operates on a prefix, policies must operate on a prefix because Vault
will sanitize request paths to be prefixes:
will sanitize request paths to be prefixes. In other words, policy paths
targeting `list` capability should end with a trailing slash:
```ruby
path "secret/foo" {