Saltpad access via salt-api, the first part of security is the eauth configuration in salt-master (see installation for more details).
Saltpad works best with full-right access accounts but some work is ongoing to have a better support for fine-grain right management on salt-master side (see saltstack/salt#21679).
Saltpad tries very hard to not store confidential data on your browser. The only information stored are:
- Last jobs ids launched via saltpad
- Followeds jobs ids
- The salt-api token used for authentication
Saltpad will never store any minion information or job information in your browser.