diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 2 | ||||
| -rw-r--r-- | docs/dashboard.md | 9 |
2 files changed, 6 insertions, 5 deletions
diff --git a/docs/access.md b/docs/access.md index a3b8864..107de8d 100644 --- a/docs/access.md +++ b/docs/access.md @@ -102,7 +102,7 @@ curl -H "Authorization: Bearer ct1.…" http://other-node:3000/store then the user logs in again. A refreshed token may say less (`limit`), never more, and live less (`lifetime`, in seconds), and then ends its session with it: nobody refreshes it past its end. A dashboard opening another member's hands it one reading - only, for five minutes ([`dashboard.md`](dashboard.md)). + the member list only, for five minutes ([`dashboard.md`](dashboard.md)). * **Revoking**: a user disabled or removed is refused at once; all of a user's tokens, by the user (`POST /auth/logout`) or by one who may manage users (`DELETE /admin/users/{name}/tokens`), which sets `_continuum/logouts/<name>`: tokens issued diff --git a/docs/dashboard.md b/docs/dashboard.md index 2e482e8..01507df 100644 --- a/docs/dashboard.md +++ b/docs/dashboard.md @@ -204,10 +204,11 @@ measured. * **Right-click a node**: its menu: subscribing, and opening its dashboard. * **Open a node's dashboard** (its menu): in this page, where the node publishes one (`--dashboard-url`, in the member list; e.g. behind a reverse proxy, - [`operations.md`](operations.md)). A token from this node goes along, reading only, - for five minutes: where the browser has no session at the other dashboard, its login - page begins one with it (reading only; log in there to do more), unless its proxy asks - for credentials of its own. It opens as this one was left: the map's nodes where + [`operations.md`](operations.md)). A token from this node goes along, reading the + member list only, for five minutes, enough for the map: where the browser has no + session at the other dashboard, its login page begins one with it (log in there to + see more), unless its proxy asks for credentials of its own. Whoever publishes the + dashboard (a member writes its own URL) gets that token, no more. It opens as this one was left: the map's nodes where they were (on a dynamic map they then move to their places among the other node's links, smoothly; new ones are placed among them), the view, the pins, what is in focus, the legend shown or hidden, what is open in the figures and in the document, |