|
|
|
|
@@ -37,7 +37,7 @@
|
|
|
|
|
],
|
|
|
|
|
"definitions": {
|
|
|
|
|
"Capability": {
|
|
|
|
|
"description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows fine grained access to the Tauri core, application, or plugin commands. If a window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```",
|
|
|
|
|
"description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```",
|
|
|
|
|
"type": "object",
|
|
|
|
|
"required": [
|
|
|
|
|
"identifier",
|
|
|
|
|
@@ -70,14 +70,14 @@
|
|
|
|
|
"type": "boolean"
|
|
|
|
|
},
|
|
|
|
|
"windows": {
|
|
|
|
|
"description": "List of windows that are affected by this capability. Can be a glob pattern.\n\nOn multiwebview windows, prefer [`Self::webviews`] for a fine grained access control.\n\n## Example\n\n`[\"main\"]`",
|
|
|
|
|
"description": "List of windows that are affected by this capability. Can be a glob pattern.\n\nIf a window label matches any of the patterns in this list, the capability will be enabled on all the webviews of that window, regardless of the value of [`Self::webviews`].\n\nOn multiwebview windows, prefer specifying [`Self::webviews`] and omitting [`Self::windows`] for a fine grained access control.\n\n## Example\n\n`[\"main\"]`",
|
|
|
|
|
"type": "array",
|
|
|
|
|
"items": {
|
|
|
|
|
"type": "string"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"webviews": {
|
|
|
|
|
"description": "List of webviews that are affected by this capability. Can be a glob pattern.\n\nThis is only required when using on multiwebview contexts, by default all child webviews of a window that matches [`Self::windows`] are linked.\n\n## Example\n\n`[\"sub-webview-one\", \"sub-webview-two\"]`",
|
|
|
|
|
"description": "List of webviews that are affected by this capability. Can be a glob pattern.\n\nThe capability will be enabled on all the webviews whose label matches any of the patterns in this list, regardless of whether the webview's window label matches a pattern in [`Self::windows`].\n\n## Example\n\n`[\"sub-webview-one\", \"sub-webview-two\"]`",
|
|
|
|
|
"type": "array",
|
|
|
|
|
"items": {
|
|
|
|
|
"type": "string"
|
|
|
|
|
@@ -2004,6 +2004,41 @@
|
|
|
|
|
"Identifier": {
|
|
|
|
|
"description": "Permission identifier",
|
|
|
|
|
"oneOf": [
|
|
|
|
|
{
|
|
|
|
|
"description": "This permission set configures if your\napplication can enable or disable auto\nstarting the application on boot.\n\n#### Granted Permissions\n\nIt allows all to check, enable and\ndisable the automatic start on boot.\n\n",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:default"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the disable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:allow-disable"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the enable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:allow-enable"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the is_enabled command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:allow-is-enabled"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the disable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:deny-disable"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the enable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:deny-enable"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the is_enabled command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "autostart:deny-is-enabled"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "No features are enabled by default, as we believe\nthe clipboard can be inherently dangerous and it is \napplication specific if read and/or write access is needed.\n\nClipboard interaction needs to be explicitly enabled.\n",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -2094,11 +2129,26 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:allow-default-window-icon"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the fetch_data_store_identifiers command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:allow-fetch-data-store-identifiers"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the identifier command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:allow-identifier"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the name command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:allow-name"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the remove_data_store command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:allow-remove-data-store"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the set_app_theme command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -2129,11 +2179,26 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:deny-default-window-icon"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the fetch_data_store_identifiers command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:deny-fetch-data-store-identifiers"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the identifier command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:deny-identifier"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the name command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:deny-name"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the remove_data_store command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:app:deny-remove-data-store"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the set_app_theme command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -2929,6 +2994,11 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:window:allow-internal-toggle-maximize"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the is_always_on_top command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:window:allow-is-always-on-top"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the is_closable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -3294,6 +3364,11 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:window:deny-internal-toggle-maximize"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the is_always_on_top command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:window:deny-is-always-on-top"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the is_closable command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -3599,6 +3674,51 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "core:window:deny-unminimize"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Allows reading the opened deep link via the get_current command",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:default"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the get_current command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:allow-get-current"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the is_registered command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:allow-is-registered"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the register command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:allow-register"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the unregister command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:allow-unregister"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the get_current command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:deny-get-current"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the is_registered command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:deny-is-registered"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the register command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:deny-register"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the unregister command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "deep-link:deny-unregister"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -5969,6 +6089,11 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-get-save-strategy"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the get_store_collection_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-get-store-collection-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the get_store_ids command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -5984,11 +6109,6 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-get-store-state"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the get_valtio_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-get-valtio-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the load command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -6039,16 +6159,16 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-set-save-strategy"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the set_store_collection_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-set-store-collection-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the set_store_options command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-set-store-options"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the set_valtio_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:allow-set-valtio-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Enables the unload command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -6069,6 +6189,11 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-get-save-strategy"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the get_store_collection_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-get-store-collection-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the get_store_ids command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -6084,11 +6209,6 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-get-store-state"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the get_valtio_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-get-valtio-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the load command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
@@ -6139,16 +6259,16 @@
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-set-save-strategy"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the set_store_collection_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-set-store-collection-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the set_store_options command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-set-store-options"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the set_valtio_path command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
"const": "valtio:deny-set-valtio-path"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"description": "Denies the unload command without any pre-configured scope.",
|
|
|
|
|
"type": "string",
|
|
|
|
|
|
