不允许Vault管理策略创建新策略

import requests

# Vault服务器的URL
vault_url = "https://your-vault-server:8200"

# 认证信息
token = "your-vault-token"

# 检查当前用户的权限
headers = {
    "X-Vault-Token": token,
    "Content-Type": "application/json"
}
response = requests.get(f"{vault_url}/v1/sys/policy/list", headers=headers)

if response.status_code == 200:
    print("当前用户有权限查看策略列表")
else:
    print("当前用户没有权限查看策略列表")

# 尝试创建一个新的策略
new_policy = {
    "policy": {
        "path": {
            "secret/*": {
                "capabilities": ["create", "read", "update", "delete", "list"]
            }
        }
    }
}

response = requests.post(f"{vault_url}/v1/sys/policy/my-new-policy", headers=headers, json=new_policy)

if response.status_code == 200:
    print("成功创建新策略")
else:
    print(f"创建新策略失败，状态码: {response.status_code}")
    print(response.json())