9ad64ec987
Some checks failed
integration tests / run-integration-tests (windows-latest) (push) Has been cancelled
Test Rust / test (push) Has been cancelled
test plugins e2e (mobile) / ios (push) Has been cancelled
test plugins e2e / test (map[name:Windows os:windows-latest]) (push) Has been cancelled
test plugins e2e / test (map[name:macOS os:macos-latest]) (push) Has been cancelled
integration tests / run-integration-tests (macos-latest) (push) Has been cancelled
version or publish / version-or-publish (push) Failing after 0s
integration tests / run-integration-tests (ubuntu-22.04) (push) Failing after 0s
Lint JavaScript / eslint (push) Failing after 0s
Sync / sync-to-mirrors (push) Failing after 0s
test plugins e2e (mobile) / android (push) Failing after 0s
test plugins e2e / test (map[name:Linux os:ubuntu-latest]) (push) Failing after 0s
Test Rust / changes (push) Failing after 0s
Lint Rust / changes (push) Failing after 0s
Lint Rust / clippy (push) Has been skipped
Audit Rust / audit-rust (push) Failing after 1s
Audit JavaScript / audit-js (push) Failing after 1s
474 lines
16 KiB
JSON
474 lines
16 KiB
JSON
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "PermissionFile",
|
|
"description": "Permission file that can define a default permission, a set of permissions or a list of inlined permissions.",
|
|
"type": "object",
|
|
"properties": {
|
|
"default": {
|
|
"description": "The default permission set for the plugin",
|
|
"anyOf": [
|
|
{
|
|
"$ref": "#/definitions/DefaultPermission"
|
|
},
|
|
{
|
|
"type": "null"
|
|
}
|
|
]
|
|
},
|
|
"set": {
|
|
"description": "A list of permissions sets defined",
|
|
"type": "array",
|
|
"items": {
|
|
"$ref": "#/definitions/PermissionSet"
|
|
}
|
|
},
|
|
"permission": {
|
|
"description": "A list of inlined permissions",
|
|
"default": [],
|
|
"type": "array",
|
|
"items": {
|
|
"$ref": "#/definitions/Permission"
|
|
}
|
|
}
|
|
},
|
|
"definitions": {
|
|
"DefaultPermission": {
|
|
"description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
|
|
"type": "object",
|
|
"required": [
|
|
"permissions"
|
|
],
|
|
"properties": {
|
|
"version": {
|
|
"description": "The version of the permission.",
|
|
"type": [
|
|
"integer",
|
|
"null"
|
|
],
|
|
"format": "uint64",
|
|
"minimum": 1.0
|
|
},
|
|
"description": {
|
|
"description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
|
|
"type": [
|
|
"string",
|
|
"null"
|
|
]
|
|
},
|
|
"permissions": {
|
|
"description": "All permissions this set contains.",
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"PermissionSet": {
|
|
"description": "A set of direct permissions grouped together under a new name.",
|
|
"type": "object",
|
|
"required": [
|
|
"description",
|
|
"identifier",
|
|
"permissions"
|
|
],
|
|
"properties": {
|
|
"identifier": {
|
|
"description": "A unique identifier for the permission.",
|
|
"type": "string"
|
|
},
|
|
"description": {
|
|
"description": "Human-readable description of what the permission does.",
|
|
"type": "string"
|
|
},
|
|
"permissions": {
|
|
"description": "All permissions this set contains.",
|
|
"type": "array",
|
|
"items": {
|
|
"$ref": "#/definitions/PermissionKind"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"Permission": {
|
|
"description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
|
|
"type": "object",
|
|
"required": [
|
|
"identifier"
|
|
],
|
|
"properties": {
|
|
"version": {
|
|
"description": "The version of the permission.",
|
|
"type": [
|
|
"integer",
|
|
"null"
|
|
],
|
|
"format": "uint64",
|
|
"minimum": 1.0
|
|
},
|
|
"identifier": {
|
|
"description": "A unique identifier for the permission.",
|
|
"type": "string"
|
|
},
|
|
"description": {
|
|
"description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
|
|
"type": [
|
|
"string",
|
|
"null"
|
|
]
|
|
},
|
|
"commands": {
|
|
"description": "Allowed or denied commands when using this permission.",
|
|
"default": {
|
|
"allow": [],
|
|
"deny": []
|
|
},
|
|
"allOf": [
|
|
{
|
|
"$ref": "#/definitions/Commands"
|
|
}
|
|
]
|
|
},
|
|
"scope": {
|
|
"description": "Allowed or denied scoped when using this permission.",
|
|
"allOf": [
|
|
{
|
|
"$ref": "#/definitions/Scopes"
|
|
}
|
|
]
|
|
},
|
|
"platforms": {
|
|
"description": "Target platforms this permission applies. By default all platforms are affected by this permission.",
|
|
"type": [
|
|
"array",
|
|
"null"
|
|
],
|
|
"items": {
|
|
"$ref": "#/definitions/Target"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"Commands": {
|
|
"description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
|
|
"type": "object",
|
|
"properties": {
|
|
"allow": {
|
|
"description": "Allowed command.",
|
|
"default": [],
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
},
|
|
"deny": {
|
|
"description": "Denied command, which takes priority.",
|
|
"default": [],
|
|
"type": "array",
|
|
"items": {
|
|
"type": "string"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"Scopes": {
|
|
"description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
|
|
"type": "object",
|
|
"properties": {
|
|
"allow": {
|
|
"description": "Data that defines what is allowed by the scope.",
|
|
"type": [
|
|
"array",
|
|
"null"
|
|
],
|
|
"items": {
|
|
"$ref": "#/definitions/Value"
|
|
}
|
|
},
|
|
"deny": {
|
|
"description": "Data that defines what is denied by the scope. This should be prioritized by validation logic.",
|
|
"type": [
|
|
"array",
|
|
"null"
|
|
],
|
|
"items": {
|
|
"$ref": "#/definitions/Value"
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"Value": {
|
|
"description": "All supported ACL values.",
|
|
"anyOf": [
|
|
{
|
|
"description": "Represents a null JSON value.",
|
|
"type": "null"
|
|
},
|
|
{
|
|
"description": "Represents a [`bool`].",
|
|
"type": "boolean"
|
|
},
|
|
{
|
|
"description": "Represents a valid ACL [`Number`].",
|
|
"allOf": [
|
|
{
|
|
"$ref": "#/definitions/Number"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"description": "Represents a [`String`].",
|
|
"type": "string"
|
|
},
|
|
{
|
|
"description": "Represents a list of other [`Value`]s.",
|
|
"type": "array",
|
|
"items": {
|
|
"$ref": "#/definitions/Value"
|
|
}
|
|
},
|
|
{
|
|
"description": "Represents a map of [`String`] keys to [`Value`]s.",
|
|
"type": "object",
|
|
"additionalProperties": {
|
|
"$ref": "#/definitions/Value"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"Number": {
|
|
"description": "A valid ACL number.",
|
|
"anyOf": [
|
|
{
|
|
"description": "Represents an [`i64`].",
|
|
"type": "integer",
|
|
"format": "int64"
|
|
},
|
|
{
|
|
"description": "Represents a [`f64`].",
|
|
"type": "number",
|
|
"format": "double"
|
|
}
|
|
]
|
|
},
|
|
"Target": {
|
|
"description": "Platform target.",
|
|
"oneOf": [
|
|
{
|
|
"description": "MacOS.",
|
|
"type": "string",
|
|
"enum": [
|
|
"macOS"
|
|
]
|
|
},
|
|
{
|
|
"description": "Windows.",
|
|
"type": "string",
|
|
"enum": [
|
|
"windows"
|
|
]
|
|
},
|
|
{
|
|
"description": "Linux.",
|
|
"type": "string",
|
|
"enum": [
|
|
"linux"
|
|
]
|
|
},
|
|
{
|
|
"description": "Android.",
|
|
"type": "string",
|
|
"enum": [
|
|
"android"
|
|
]
|
|
},
|
|
{
|
|
"description": "iOS.",
|
|
"type": "string",
|
|
"enum": [
|
|
"iOS"
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"PermissionKind": {
|
|
"type": "string",
|
|
"oneOf": [
|
|
{
|
|
"description": "Enables the clear command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-clear",
|
|
"markdownDescription": "Enables the clear command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the clear command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-clear",
|
|
"markdownDescription": "Denies the clear command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the delete command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-delete",
|
|
"markdownDescription": "Enables the delete command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the delete command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-delete",
|
|
"markdownDescription": "Denies the delete command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the entries command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-entries",
|
|
"markdownDescription": "Enables the entries command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the entries command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-entries",
|
|
"markdownDescription": "Denies the entries command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the get command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-get",
|
|
"markdownDescription": "Enables the get command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the get command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-get",
|
|
"markdownDescription": "Denies the get command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the get_store command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-get-store",
|
|
"markdownDescription": "Enables the get_store command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the get_store command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-get-store",
|
|
"markdownDescription": "Denies the get_store command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the has command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-has",
|
|
"markdownDescription": "Enables the has command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the has command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-has",
|
|
"markdownDescription": "Denies the has command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the keys command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-keys",
|
|
"markdownDescription": "Enables the keys command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the keys command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-keys",
|
|
"markdownDescription": "Denies the keys command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the length command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-length",
|
|
"markdownDescription": "Enables the length command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the length command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-length",
|
|
"markdownDescription": "Denies the length command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the load command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-load",
|
|
"markdownDescription": "Enables the load command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the load command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-load",
|
|
"markdownDescription": "Denies the load command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the reload command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-reload",
|
|
"markdownDescription": "Enables the reload command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the reload command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-reload",
|
|
"markdownDescription": "Denies the reload command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the reset command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-reset",
|
|
"markdownDescription": "Enables the reset command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the reset command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-reset",
|
|
"markdownDescription": "Denies the reset command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the save command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-save",
|
|
"markdownDescription": "Enables the save command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the save command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-save",
|
|
"markdownDescription": "Denies the save command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the set command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-set",
|
|
"markdownDescription": "Enables the set command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the set command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-set",
|
|
"markdownDescription": "Denies the set command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Enables the values command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "allow-values",
|
|
"markdownDescription": "Enables the values command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "Denies the values command without any pre-configured scope.",
|
|
"type": "string",
|
|
"const": "deny-values",
|
|
"markdownDescription": "Denies the values command without any pre-configured scope."
|
|
},
|
|
{
|
|
"description": "This permission set configures what kind of\noperations are available from the store plugin.\n\n#### Granted Permissions\n\nAll operations are enabled by default.\n\n\n#### This default permission set includes:\n\n- `allow-load`\n- `allow-get-store`\n- `allow-set`\n- `allow-get`\n- `allow-has`\n- `allow-delete`\n- `allow-clear`\n- `allow-reset`\n- `allow-keys`\n- `allow-values`\n- `allow-entries`\n- `allow-length`\n- `allow-reload`\n- `allow-save`",
|
|
"type": "string",
|
|
"const": "default",
|
|
"markdownDescription": "This permission set configures what kind of\noperations are available from the store plugin.\n\n#### Granted Permissions\n\nAll operations are enabled by default.\n\n\n#### This default permission set includes:\n\n- `allow-load`\n- `allow-get-store`\n- `allow-set`\n- `allow-get`\n- `allow-has`\n- `allow-delete`\n- `allow-clear`\n- `allow-reset`\n- `allow-keys`\n- `allow-values`\n- `allow-entries`\n- `allow-length`\n- `allow-reload`\n- `allow-save`"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
} |