Struct tauri_utils::acl::capability::Capability

pub struct Capability {
    pub identifier: String,
    pub description: String,
    pub context: CapabilityContext,
    pub windows: Vec<String>,
    pub permissions: Vec<PermissionEntry>,
    pub platforms: Vec<Target>,
}

a grouping and boundary mechanism developers can use to separate windows or plugins functionality from each other at runtime.

If a window is not matching any capability then it has no access to the IPC layer at all.

This can be done to create trust groups and reduce impact of vulnerabilities in certain plugins or windows. Windows can be added to a capability by exact name or glob patterns like , admin- or main-window.

Fields

identifier: String

Identifier of the capability.

description: String

Description of the capability.

context: CapabilityContext

Execution context of the capability.

At runtime, Tauri filters the IPC command together with the context to determine whether it is allowed or not and its scope.

windows: Vec<String>

List of windows that uses this capability. Can be a glob pattern.

permissions: Vec<PermissionEntry>

List of permissions attached to this capability. Must include the plugin name as prefix in the form of ${plugin-name}:${permission-name}.

platforms: Vec<Target>

Target platforms this capability applies. By default all platforms applies.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Capability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.