Vault KV UI — Critical UX Issue: "Manage" Button Accessible Inside Folders Allows Accidental Engine Disable
Hi HashiCorp Team,
I wanted to bring a critical UX issue to your attention regarding the Vault KV secrets engine interface.
Problem: When a user navigates inside any folder within the KV engine, the "Manage" button remains visible and accessible at the top of the page. However, this button controls the entire KV engine — not the folder the user is currently in — and includes a destructive option to disable the whole engine.
Impact: Users who believe they are managing a specific folder can accidentally disable the entire KV engine, causing serious technical failures and service disruption.
Suggested Fix:
- Hide the "Manage" button when the user is inside a folder (i.e., show it only at the engine root level)
- Or add a confirmation dialog for destructive engine-level operations to prevent accidental actions
This is a straightforward change that would significantly reduce the risk of accidental data loss and service downtime.
We would appreciate it if this could be reviewed and prioritized.
Best regards
Source: hashicorp/vault