only use id for lookup

hashicorp · Jan 25, 2019 · 62ff7fa · 62ff7fa
1 parent 0585c56
commit 62ff7fa
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/vault/policy_store.go b/vault/policy_store.go
@@ -84,10 +84,7 @@ path "sys/capabilities-self" {
     capabilities = ["update"]
 }
 
-# Allow a token to look up its own entity by name or id
-path "identity/entity/name/{{identity.entity.name}}" {
-  capabilities = ["read"]
-}
+# Allow a token to look up its own entity by id
 path "identity/entity/id/{{identity.entity.id}}" {
   capabilities = ["read"]
 }