diff --git a/website/source/assets/images/guide-ui-acl-token-set.png b/website/source/assets/images/guide-ui-acl-token-set.png new file mode 100644 index 000000000..fce2fa673 Binary files /dev/null and b/website/source/assets/images/guide-ui-acl-token-set.png differ diff --git a/website/source/assets/images/guide-ui-acl-token.png b/website/source/assets/images/guide-ui-acl-token.png new file mode 100644 index 000000000..f5224c77e Binary files /dev/null and b/website/source/assets/images/guide-ui-acl-token.png differ diff --git a/website/source/assets/images/guide-ui-jobs-list-unauthorized.png b/website/source/assets/images/guide-ui-jobs-list-unauthorized.png new file mode 100644 index 000000000..05a5059f0 Binary files /dev/null and b/website/source/assets/images/guide-ui-jobs-list-unauthorized.png differ diff --git a/website/source/guides/web-ui/securing.html.md b/website/source/guides/web-ui/securing.html.md index 9377e6074..db14a1dce 100644 --- a/website/source/guides/web-ui/securing.html.md +++ b/website/source/guides/web-ui/securing.html.md @@ -12,9 +12,9 @@ By default, all features—read and write—are available to all users of the We ## Browsing the Web UI Without an Access Control Token -When a user browses the Web UI without specifying an access control token, they assume the rules of the [anonymous policy](/guides/security/acl.html#set-an-anonymous-policy-optional-). Since Nomad ACLs use a default-deny model, if ACLs are enabled an no anonymous policy is authored, the Web UI will show unauthorized messages on every page other than the settings page. +When a user browses the Web UI without specifying an access control token, they assume the rules of the [anonymous policy](/guides/security/acl.html#set-an-anonymous-policy-optional-). Since Nomad ACLs use a default-deny model, if ACLs are enabled and no anonymous policy is authored, the Web UI will show unauthorized messages on every page other than the settings page. -~> Screenshot (No access, set an ACL token) +[![Not authorized to see jobs][img-jobs-list-unauthorized]][img-jobs-list-unauthorized] ## Setting an Access Control Token @@ -22,6 +22,11 @@ From the ACL Tokens page, which is accessible from the top-right menu, you can s This token is saved to local storage and can be manually cleared from the ACL Tokens page. -~> Screenshot (No token set) +[![ACL token page][img-acl-token]][img-acl-token] -~> Screenshot (Token set) +[![ACL token set][img-acl-token-set]][img-acl-token-set] + + +[img-jobs-list-unauthorized]: /assets/images/guide-ui-jobs-list-unauthorized.png +[img-acl-token]: /assets/images/guide-ui-acl-token.png +[img-acl-token-set]: /assets/images/guide-ui-acl-token-set.png