{"action":"created","issue":{"url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/171","labels_url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/171/labels{/name}","comments_url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/171/comments","events_url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/171/events","html_url":"https://github.com/Nordstrom/chef-vault/issues/171","id":81454557,"number":171,"title":"Permission Issue - Missing Read Permission","user":{"login":"nhudacin","id":6682884,"avatar_url":"https://avatars.githubusercontent.com/u/6682884?v=3","gravatar_id":"","url":"https://api.github.com/users/nhudacin","html_url":"https://github.com/nhudacin","followers_url":"https://api.github.com/users/nhudacin/followers","following_url":"https://api.github.com/users/nhudacin/following{/other_user}","gists_url":"https://api.github.com/users/nhudacin/gists{/gist_id}","starred_url":"https://api.github.com/users/nhudacin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhudacin/subscriptions","organizations_url":"https://api.github.com/users/nhudacin/orgs","repos_url":"https://api.github.com/users/nhudacin/repos","events_url":"https://api.github.com/users/nhudacin/events{/privacy}","received_events_url":"https://api.github.com/users/nhudacin/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-05-27T13:48:06Z","updated_at":"2015-05-28T13:16:52Z","closed_at":"2015-05-28T13:16:52Z","body":"First, great job on this!! Really neat tool. \r\n\r\nObviously I'm a bit new to this tool and I'm struggling a bit to get up and running. The examples and the demo is great. I used both markdown documents extensively. I think I have everything working ok, now I'm just trying to incorporate chef-vault into our CI system. \r\n\r\nI'm bootstrapping a windows node for some automated testing. It looks like the knife-windows module isn't fully supporting chef-vault just yet, I entered this issue today: https://github.com/chef/knife-windows/issues/237 which means I have to bootstrap a node, refresh the vault, then add a role to the node, then force a client run (unless anyone has any better suggestions). I wish I was able to force a vault refresh before the first client run on the node. \r\n\r\nAnyway.. I keep getting this error: \r\n\r\nknife vault update passwords root -S \"role:*\"\r\nERROR: You authenticated successfully to *chef server url* as nhudacin but you are not authorized for this action\r\nResponse:  missing read permission\r\n\r\nI am unable to do these commands as well: \r\nknife vault update passwords root -S \"*:*\"\r\nknife vault update passwords root -A \"*anyone other than me*\"\r\n\r\nMy question is what permission do I need to ask for on our chef server in order to perform these commands? Does anyone know if this is maybe a search permission with solr? \r\n\r\nThanks and keep up the great work!\r\n"},"comment":{"url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/comments/106306324","html_url":"https://github.com/Nordstrom/chef-vault/issues/171#issuecomment-106306324","issue_url":"https://api.github.com/repos/Nordstrom/chef-vault/issues/171","id":106306324,"user":{"login":"nhudacin","id":6682884,"avatar_url":"https://avatars.githubusercontent.com/u/6682884?v=3","gravatar_id":"","url":"https://api.github.com/users/nhudacin","html_url":"https://github.com/nhudacin","followers_url":"https://api.github.com/users/nhudacin/followers","following_url":"https://api.github.com/users/nhudacin/following{/other_user}","gists_url":"https://api.github.com/users/nhudacin/gists{/gist_id}","starred_url":"https://api.github.com/users/nhudacin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhudacin/subscriptions","organizations_url":"https://api.github.com/users/nhudacin/orgs","repos_url":"https://api.github.com/users/nhudacin/repos","events_url":"https://api.github.com/users/nhudacin/events{/privacy}","received_events_url":"https://api.github.com/users/nhudacin/received_events","type":"User","site_admin":false},"created_at":"2015-05-28T13:16:52Z","updated_at":"2015-05-28T13:16:52Z","body":"I'm closing this issue. @jf647  confirmed that: \r\n\r\nA vault can be created by a chef user and used by that user and any client created by that user. \r\n\r\nIn order for a vault to be managed by different users, the creating user must have read access to those other users' public key and read permission to their clients' public keys."}}