Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b6tTs7ivgTNq4ZrurU
7 lines
279 B
Plaintext
7 lines
279 B
Plaintext
policy app-read (vault/app-read.hcl) attached to a 1h token
|
|
application with that token: started, db.password = password-v1
|
|
same token, vault kv get secret/other-team:
|
|
* permission denied
|
|
same token, vault kv put secret/secrets-demo db.password=hijacked:
|
|
* permission denied
|