.. _ui_authentication:

|c3-short| UI Authentication
============================

.. include:: ../includes/rest-api-auth.rst

.. include:: ../../includes/cp-demo-tip.rst

.. _c3-auth-acls:

Authorization with |ak| ACLs
----------------------------

Standard |ak-tm| authentication, authorization, and encryption options are available for
:ref:`control center <kafka_encryption_authentication_authorization_settings>` 
and :ref:`interceptors <interceptor_configuration_options>`.
You can use this script to create the ACLs that are required by |c3-short| 
to operate on an authorized cluster. This script
must be run before you start |c3-short|:

.. sourcecode:: bash

       export PRINCIPAL=User:username
       export CONTROL_CENTER_OPTS="-Djava.security.auth.login.config=/path/to/kafka_jaas.conf"
       bin/control-center-set-acls config/control-center.properties

You will also need to export a |c3-short| JAAS config before starting |c3-short|.

.. sourcecode:: bash

       export PRINCIPAL=User:username
       export CONTROL_CENTER_OPTS='-Djava.security.auth.login.config=/path/to/c3_jaas.conf'
       bin/control-center-start config/control-center.properties