{"action":"closed","issue":{"url":"https://api.github.com/repos/hashicorp/vault/issues/4395","repository_url":"https://api.github.com/repos/hashicorp/vault","labels_url":"https://api.github.com/repos/hashicorp/vault/issues/4395/labels{/name}","comments_url":"https://api.github.com/repos/hashicorp/vault/issues/4395/comments","events_url":"https://api.github.com/repos/hashicorp/vault/issues/4395/events","html_url":"https://github.com/hashicorp/vault/issues/4395","id":315985398,"number":4395,"title":"Policies with the sequence ,. can be created but not deleted with the Vault UI","user":{"login":"sgowie","id":15369222,"avatar_url":"https://avatars1.githubusercontent.com/u/15369222?v=4","gravatar_id":"","url":"https://api.github.com/users/sgowie","html_url":"https://github.com/sgowie","followers_url":"https://api.github.com/users/sgowie/followers","following_url":"https://api.github.com/users/sgowie/following{/other_user}","gists_url":"https://api.github.com/users/sgowie/gists{/gist_id}","starred_url":"https://api.github.com/users/sgowie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sgowie/subscriptions","organizations_url":"https://api.github.com/users/sgowie/orgs","repos_url":"https://api.github.com/users/sgowie/repos","events_url":"https://api.github.com/users/sgowie/events{/privacy}","received_events_url":"https://api.github.com/users/sgowie/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"meirish","id":39469,"avatar_url":"https://avatars3.githubusercontent.com/u/39469?v=4","gravatar_id":"","url":"https://api.github.com/users/meirish","html_url":"https://github.com/meirish","followers_url":"https://api.github.com/users/meirish/followers","following_url":"https://api.github.com/users/meirish/following{/other_user}","gists_url":"https://api.github.com/users/meirish/gists{/gist_id}","starred_url":"https://api.github.com/users/meirish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/meirish/subscriptions","organizations_url":"https://api.github.com/users/meirish/orgs","repos_url":"https://api.github.com/users/meirish/repos","events_url":"https://api.github.com/users/meirish/events{/privacy}","received_events_url":"https://api.github.com/users/meirish/received_events","type":"User","site_admin":false},"assignees":[{"login":"meirish","id":39469,"avatar_url":"https://avatars3.githubusercontent.com/u/39469?v=4","gravatar_id":"","url":"https://api.github.com/users/meirish","html_url":"https://github.com/meirish","followers_url":"https://api.github.com/users/meirish/followers","following_url":"https://api.github.com/users/meirish/following{/other_user}","gists_url":"https://api.github.com/users/meirish/gists{/gist_id}","starred_url":"https://api.github.com/users/meirish/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/meirish/subscriptions","organizations_url":"https://api.github.com/users/meirish/orgs","repos_url":"https://api.github.com/users/meirish/repos","events_url":"https://api.github.com/users/meirish/events{/privacy}","received_events_url":"https://api.github.com/users/meirish/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2018-04-19T18:14:32Z","updated_at":"2018-04-20T01:51:42Z","closed_at":"2018-04-20T01:51:42Z","author_association":"NONE","body":"<!-- Please reserve GitHub issues for bug reports and feature requests.\r\n\r\nFor questions, the best place to get answers is on our [mailing list](https://groups.google.com/forum/#!forum/vault-tool), as they will get more visibility from experienced users than the issue tracker.\r\n\r\nPlease note: We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at security@hashicorp.com. Our PGP key is available at [our security page](https://www.hashicorp.com/security/).\r\n\r\n-->\r\n\r\n\r\n<!-- Uncomment this section if this is a feature request. Include or exclude other sections as deemed appropriate.\r\n**Feature Request:**\r\n-->\r\n\r\n**Environment:**\r\n<!-- The version can be retrieved with `vault version`. -->\r\n\r\n* Vault Version: 0.10.0\r\n* Operating System/Architecture: Official docker container\r\n\r\n**Vault Config File:**\r\n<!-- Configuration file used for the vault server. -->\r\n\r\n```hcl\r\nstorage \"consul\" {\r\n  address = \"...\"\r\n  scheme = \"https\"\r\n  token = \"...\"\r\n  path = \"vault/\"\r\n  tls_ca_file = \"/etc/vault-certs/ca.crt\"\r\n  check_timeout = \"30s\"\r\n  disable_registration = \"true\"\r\n}\r\ndisable_mlock=true\r\nlistener \"tcp\" {\r\n  address = \"0.0.0.0:8200\"\r\n  tls_cert_file = \"/etc/vault-certs/vault.crt\"\r\n  tls_key_file = \"/etc/vault-certs/vault.key\"\r\n}\r\ndefault_lease_ttl=\"1h\"\r\nmax_lease_ttl=\"48h\"\r\nui=true\r\n```\r\n\r\n**Startup Log Output:**\r\n<!-- Logs from vault's output on startup, if available. -->\r\n\r\n```text\r\nn/a\r\n```\r\n\r\n**Expected Behavior:**\r\nPolicies containing `,.` in their name should either not be permitted, or should be manipulatable after the fact.\r\n\r\n**Actual Behavior:**\r\nPolicies are created but cannot be edited with the UI.   Vault CLI can still be used to delete errant policies\r\n\r\n**Steps to Reproduce:**\r\n- Log into vault UI\r\n- Navigate to Policies\r\n- Click 'Create ACL Policy'\r\n- Provide a name containing `,.` e.g. `symbol,. and maybe other things`\r\n- Define any Policy, e.g. `path \"secret/no/do/not/look\" {capabilities = [\"create\", \"read\", \"delete\", \"list\", \"update\"]}`\r\n- Click Create Policy\r\n\r\nProblem manifests in the absence of an edit toggle on the resulting page, or when on the Policy index page the elipsis modal is empty.\r\n\r\n**Important Factoids:**\r\n<!-- Describe any atypical environment setup, if any. -->\r\n\r\n**References:**\r\n<!-- Link to any references, such as GitHub issues or pull requests. -->\r\n"}}
{"actor":{"display_login":"meirish"}}