Struct tauri_utils::acl::capability::Capability

pub struct Capability {
    pub identifier: String,
    pub description: String,
    pub context: CapabilityContext,
    pub windows: Vec<String>,
    pub webviews: Vec<String>,
    pub permissions: Vec<PermissionEntry>,
    pub platforms: Vec<Target>,
}

a grouping and boundary mechanism developers can use to separate windows or plugins functionality from each other at runtime.

If a window is not matching any capability then it has no access to the IPC layer at all.

This can be done to create trust groups and reduce impact of vulnerabilities in certain plugins or windows. Windows can be added to a capability by exact name or glob patterns like , admin- or main-window.

Fields

identifier: String

Identifier of the capability.

description: String

Description of the capability.

context: CapabilityContext

Execution context of the capability.

At runtime, Tauri filters the IPC command together with the context to determine whether it is allowed or not and its scope.

windows: Vec<String>

List of windows that uses this capability. Can be a glob pattern.

On multiwebview windows, prefer Self::webviews for a fine grained access control.

webviews: Vec<String>

List of webviews that uses this capability. Can be a glob pattern.

This is only required when using on multiwebview contexts, by default all child webviews of a window that matches Self::windows are linked.

permissions: Vec<PermissionEntry>

List of permissions attached to this capability. Must include the plugin name as prefix in the form of ${plugin-name}:${permission-name}.

platforms: Vec<Target>

Target platforms this capability applies. By default all platforms applies.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Capability

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Capability

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Capability