Full Admin but No Access to files in repository

[Tri]

Hi,

Using Vault Client & Server 4.12.

I am global Vault Admin. The default repository Access is "No Access" and use Folder Security. In the Repository "Our Repo123" The Repository Access list my name as "Full Admin".

Using Vault Client 4.12, I see that "Our Repo123" repository is listed for selection (which what I expected as Full Admin). Then there is a dialog with the message "you have no right to view any items in this repository". Is it intentional?

[Beth]

The top level admin is the admin name itself. All other users, even if given admin priviledges, fall under that admin. Those with only admin privileges can still be restricted.

Check on the Folder Security area for that repository. Do you have access to view items?

[Beth]

One other thing to check...can you log in from a different machine? Or do you get the same error?

[Tri]

In Folder Security, I don't have access to this repository. If I added RCA rights to myself, then I can use Vault client and see all the files.

What I was confused is:

- I am global admin

- The admin who created the "OurRepository123" had never granted me access to this repository but yet I see it visible and selectable in my Vault Client 4.12. With Client 3.53, I would not have seen this repository. So then I assume because Client 4.12 understands that I am global admin and allows me to see it.

- When using Web Admin, I see that I have "Full Admin" rights in Repository Access and I can of course set access rights to other Vault users.

But then when using Vault Client 4.12, I don't see any file, which means that I am also subject to Folder Security as a normal user. So I am confused as why I have the Full Admin to define access to the repository but I cannot access files via the client. That's OK, I just need to confirm that this is an intended design.

FYI: Testing Client 4.12 on another computer, same warning message (no rights to see files/folder).

[Beth]

Anyone who is not 'admin,' by that I mean the actual admin user, can be subject to security. You saw the repository in the list, because you were allowed access. If you had not been using Folder Security, then you would have just entered and had access to everything. Since you have Folder Security enabled, then that's the next level that needs to be configured. It may seem odd to limit a global admin's rights, especially since you can go in and change your rights, but some remove access for themselves for things they don't want to see. Sometimes their reasons for that make sense, and sometimes they don't. Either way, that option is available, so what you are seeing is by design.

If you would like to see that changed, then just let me know what you would like and I can enter a feature request.

On the other computer, are you logging in as the same person as before?
Was the client already opened when you had made your security change? The client may need to be restarted to pick up security changes.