From 8bf831221582c51a67cd0d11195b9fb77a024a8c Mon Sep 17 00:00:00 2001 From: chrissphinx Date: Sat, 16 Feb 2019 14:04:05 -0500 Subject: [PATCH] fix example that was out-of-date showing how to allow users auth'd with userpass method to modify their own passwords --- website/source/guides/identity/policy-templating.html.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/website/source/guides/identity/policy-templating.html.md b/website/source/guides/identity/policy-templating.html.md index cd78b7acec..8ab5e4e4b0 100644 --- a/website/source/guides/identity/policy-templating.html.md +++ b/website/source/guides/identity/policy-templating.html.md @@ -141,11 +141,15 @@ group, the **group ID** or **group name** must be provided (e.g. Example: This policy allows users to change their own password given that the username -and password are defined in the `userpass` auth method. +and password are defined in the `userpass` auth method. The mount accessor +value (`auth_userpass_6671d643` in this example) can be read from the `sys/auth` endpoint. ```hcl -path "auth/userpass/users/{{identity.entity.aliases.auth_userpass_6671d643.name}}/password" { +path "auth/userpass/users/{{identity.entity.aliases.auth_userpass_6671d643.name}}" { capabilities = [ "update" ] + allowed_parameters = { + "password" = [] + } } ```