diff --git a/src/content/docs/reference/.gitignore b/src/content/docs/reference/.gitignore index ab8924aded..ef6ae4fac4 100644 --- a/src/content/docs/reference/.gitignore +++ b/src/content/docs/reference/.gitignore @@ -1,5 +1,6 @@ config.md -acl/*.md cli.mdx +acl/*.md +!acl/core-permissions.mdx javascript/* !javascript/index.mdx diff --git a/src/content/docs/reference/acl/core-permissions.mdx b/src/content/docs/reference/acl/core-permissions.mdx new file mode 100644 index 0000000000..376771279a --- /dev/null +++ b/src/content/docs/reference/acl/core-permissions.mdx @@ -0,0 +1,500 @@ +--- +title: Core Permissions +sidebar: + order: 4 +--- + +A list of all permissions that can be used with the core of the Tauri framework. + +If you are looking for permissions to specific Tauri plugins, please refer to the [Plugins section](/plugin/) of the documentation. + +## Default Permissions + +The `core:default` permission in Tauri automatically adds: + +- `core:app:default` +- `core:event:default` +- `core:image:default` +- `core:menu:default` +- `core:path:default` +- `core:resources:default` +- `core:tray:default` +- `core:webview:default` +- `core:window:default` + +## App + +### Default Permission + +The default permission, `core:app:default`, includes the following: + +- `allow-version` +- `allow-name` +- `allow-tauri-version` + +### Permission Table + +| Identifier | Description | +| ------------------------------------ | --------------------------------------------------------------------------- | +| `core:app:allow-app-hide` | Enables the `app_hide` command without any pre-configured scope. | +| `core:app:deny-app-hide` | Denies the `app_hide` command without any pre-configured scope. | +| `core:app:allow-app-show` | Enables the `app_show` command without any pre-configured scope. | +| `core:app:deny-app-show` | Denies the `app_show` command without any pre-configured scope. | +| `core:app:allow-default-window-icon` | Enables the `default_window_icon` command without any pre-configured scope. | +| `core:app:deny-default-window-icon` | Denies the `default_window_icon` command without any pre-configured scope. | +| `core:app:allow-name` | Enables the `name` command without any pre-configured scope. | +| `core:app:deny-name` | Denies the `name` command without any pre-configured scope. | +| `core:app:allow-set-app-theme` | Enables the `set_app_theme` command without any pre-configured scope. | +| `core:app:deny-set-app-theme` | Denies the `set_app_theme` command without any pre-configured scope. | +| `core:app:allow-tauri-version` | Enables the `tauri_version` command without any pre-configured scope. | +| `core:app:deny-tauri-version` | Denies the `tauri_version` command without any pre-configured scope. | +| `core:app:allow-version` | Enables the `version` command without any pre-configured scope. | +| `core:app:deny-version` | Denies the `version` command without any pre-configured scope. | + +## Event + +### Default Permission + +The default permission, `core:event:default`, includes the following: + +- `allow-listen` +- `allow-unlisten` +- `allow-emit` +- `allow-emit-to` + +### Permission Table + +| Identifier | Description | +| --------------------------- | ---------------------------------------------------------------- | +| `core:event:allow-emit` | Enables the `emit` command without any pre-configured scope. | +| `core:event:deny-emit` | Denies the `emit` command without any pre-configured scope. | +| `core:event:allow-emit-to` | Enables the `emit_to` command without any pre-configured scope. | +| `core:event:deny-emit-to` | Denies the `emit_to` command without any pre-configured scope. | +| `core:event:allow-listen` | Enables the `listen` command without any pre-configured scope. | +| `core:event:deny-listen` | Denies the `listen` command without any pre-configured scope. | +| `core:event:allow-unlisten` | Enables the `unlisten` command without any pre-configured scope. | +| `core:event:deny-unlisten` | Denies the `unlisten` command without any pre-configured scope. | + +## Image + +### Default Permission + +The default permission, `core:image:default`, includes the following: + +- `allow-new` +- `allow-from-bytes` +- `allow-from-path` +- `allow-rgba` +- `allow-size` + +### Permission Table + +| Identifier | Description | +| ----------------------------- | ------------------------------------------------------------------ | +| `core:image:allow-from-bytes` | Enables the `from_bytes` command without any pre-configured scope. | +| `core:image:deny-from-bytes` | Denies the `from_bytes` command without any pre-configured scope. | +| `core:image:allow-from-path` | Enables the `from_path` command without any pre-configured scope. | +| `core:image:deny-from-path` | Denies the `from_path` command without any pre-configured scope. | +| `core:image:allow-new` | Enables the `new` command without any pre-configured scope. | +| `core:image:deny-new` | Denies the `new` command without any pre-configured scope. | +| `core:image:allow-rgba` | Enables the `rgba` command without any pre-configured scope. | +| `core:image:deny-rgba` | Denies the `rgba` command without any pre-configured scope. | +| `core:image:allow-size` | Enables the `size` command without any pre-configured scope. | +| `core:image:deny-size` | Denies the `size` command without any pre-configured scope. | + +## Menu + +### Default Permission + +The default permission, `core:menu:default`, includes the following: + +- `allow-new` +- `allow-append` +- `allow-prepend` +- `allow-insert` +- `allow-remove` +- `allow-remove-at` +- `allow-items` +- `allow-get` +- `allow-popup` +- `allow-create-default` +- `allow-set-as-app-menu` +- `allow-set-as-window-menu` +- `allow-text` +- `allow-set-text` +- `allow-is-enabled` +- `allow-set-enabled` +- `allow-set-accelerator` +- `allow-set-as-windows-menu-for-nsapp` +- `allow-set-as-help-menu-for-nsapp` +- `allow-is-checked` +- `allow-set-checked` +- `allow-set-icon` + +### Permission Table + +| Identifier | Description | +| ----------------------------------------------- | ------------------------------------------------------------------------------------- | +| `core:menu:allow-append` | Enables the `append` command without any pre-configured scope. | +| `core:menu:deny-append` | Denies the `append` command without any pre-configured scope. | +| `core:menu:allow-create-default` | Enables the `create_default` command without any pre-configured scope. | +| `core:menu:deny-create-default` | Denies the `create_default` command without any pre-configured scope. | +| `core:menu:allow-get` | Enables the `get` command without any pre-configured scope. | +| `core:menu:deny-get` | Denies the `get` command without any pre-configured scope. | +| `core:menu:allow-insert` | Enables the `insert` command without any pre-configured scope. | +| `core:menu:deny-insert` | Denies the `insert` command without any pre-configured scope. | +| `core:menu:allow-is-checked` | Enables the `is_checked` command without any pre-configured scope. | +| `core:menu:deny-is-checked` | Denies the `is_checked` command without any pre-configured scope. | +| `core:menu:allow-is-enabled` | Enables the `is_enabled` command without any pre-configured scope. | +| `core:menu:deny-is-enabled` | Denies the `is_enabled` command without any pre-configured scope. | +| `core:menu:allow-items` | Enables the `items` command without any pre-configured scope. | +| `core:menu:deny-items` | Denies the `items` command without any pre-configured scope. | +| `core:menu:allow-new` | Enables the `new` command without any pre-configured scope. | +| `core:menu:deny-new` | Denies the `new` command without any pre-configured scope. | +| `core:menu:allow-popup` | Enables the `popup` command without any pre-configured scope. | +| `core:menu:deny-popup` | Denies the `popup` command without any pre-configured scope. | +| `core:menu:allow-prepend` | Enables the `prepend` command without any pre-configured scope. | +| `core:menu:deny-prepend` | Denies the `prepend` command without any pre-configured scope. | +| `core:menu:allow-remove` | Enables the `remove` command without any pre-configured scope. | +| `core:menu:deny-remove` | Denies the `remove` command without any pre-configured scope. | +| `core:menu:allow-remove-at` | Enables the `remove_at` command without any pre-configured scope. | +| `core:menu:deny-remove-at` | Denies the `remove_at` command without any pre-configured scope. | +| `core:menu:allow-set-accelerator` | Enables the `set_accelerator` command without any pre-configured scope. | +| `core:menu:deny-set-accelerator` | Denies the `set_accelerator` command without any pre-configured scope. | +| `core:menu:allow-set-as-app-menu` | Enables the `set_as_app_menu` command without any pre-configured scope. | +| `core:menu:deny-set-as-app-menu` | Denies the `set_as_app_menu` command without any pre-configured scope. | +| `core:menu:allow-set-as-help-menu-for-nsapp` | Enables the `set_as_help_menu_for_nsapp` command without any pre-configured scope. | +| `core:menu:deny-set-as-help-menu-for-nsapp` | Denies the `set_as_help_menu_for_nsapp` command without any pre-configured scope. | +| `core:menu:allow-set-as-window-menu` | Enables the `set_as_window_menu` command without any pre-configured scope. | +| `core:menu:deny-set-as-window-menu` | Denies the `set_as_window_menu` command without any pre-configured scope. | +| `core:menu:allow-set-as-windows-menu-for-nsapp` | Enables the `set_as_windows_menu_for_nsapp` command without any pre-configured scope. | +| `core:menu:deny-set-as-windows-menu-for-nsapp` | Denies the `set_as_windows_menu_for_nsapp` command without any pre-configured scope. | +| `core:menu:allow-set-checked` | Enables the `set_checked` command without any pre-configured scope. | +| `core:menu:deny-set-checked` | Denies the `set_checked` command without any pre-configured scope. | +| `core:menu:allow-set-enabled` | Enables the `set_enabled` command without any pre-configured scope. | +| `core:menu:deny-set-enabled` | Denies the `set_enabled` command without any pre-configured scope. | +| `core:menu:allow-set-icon` | Enables the `set_icon` command without any pre-configured scope. | +| `core:menu:deny-set-icon` | Denies the `set_icon` command without any pre-configured scope. | +| `core:menu:allow-set-text` | Enables the `set_text` command without any pre-configured scope. | +| `core:menu:deny-set-text` | Denies the `set_text` command without any pre-configured scope. | +| `core:menu:allow-text` | Enables the `text` command without any pre-configured scope. | +| `core:menu:deny-text` | Denies the `text` command without any pre-configured scope. | + +## Path + +### Default Permission + +The default permission, `core:path:default`, includes the following: + +- `allow-resolve-directory` +- `allow-resolve` +- `allow-normalize` +- `allow-join` +- `allow-dirname` +- `allow-extname` +- `allow-basename` +- `allow-is-absolute` + +### Permission Table + +| Identifier | Description | +| ----------------------------------- | ------------------------------------------------------------------------- | +| `core:path:allow-basename` | Enables the `basename` command without any pre-configured scope. | +| `core:path:deny-basename` | Denies the `basename` command without any pre-configured scope. | +| `core:path:allow-dirname` | Enables the `dirname` command without any pre-configured scope. | +| `core:path:deny-dirname` | Denies the `dirname` command without any pre-configured scope. | +| `core:path:allow-extname` | Enables the `extname` command without any pre-configured scope. | +| `core:path:deny-extname` | Denies the `extname` command without any pre-configured scope. | +| `core:path:allow-is-absolute` | Enables the `is_absolute` command without any pre-configured scope. | +| `core:path:deny-is-absolute` | Denies the `is_absolute` command without any pre-configured scope. | +| `core:path:allow-join` | Enables the `join` command without any pre-configured scope. | +| `core:path:deny-join` | Denies the `join` command without any pre-configured scope. | +| `core:path:allow-normalize` | Enables the `normalize` command without any pre-configured scope. | +| `core:path:deny-normalize` | Denies the `normalize` command without any pre-configured scope. | +| `core:path:allow-resolve` | Enables the `resolve` command without any pre-configured scope. | +| `core:path:deny-resolve` | Denies the `resolve` command without any pre-configured scope. | +| `core:path:allow-resolve-directory` | Enables the `resolve_directory` command without any pre-configured scope. | +| `core:path:deny-resolve-directory` | Denies the `resolve_directory` command without any pre-configured scope. | + +## Resources + +### Default Permission + +The default permission, `core:resources:default`, includes the following: + +- `allow-close` + +### Permission Table + +| Identifier | Description | +| ---------------------------- | ------------------------------------------------------------- | +| `core:resources:allow-close` | Enables the `close` command without any pre-configured scope. | +| `core:resources:deny-close` | Denies the `close` command without any pre-configured scope. | + +## Tray + +### Default Permission + +The default permission, `core:tray:default`, includes the following: + +- `allow-new` +- `allow-get-by-id` +- `allow-remove-by-id` +- `allow-set-icon` +- `allow-set-menu` +- `allow-set-tooltip` +- `allow-set-title` +- `allow-set-visible` +- `allow-set-temp-dir-path` +- `allow-set-icon-as-template` +- `allow-set-show-menu-on-left-click` + +### Permission Table + +| Identifier | Description | +| --------------------------------------------- | ----------------------------------------------------------------------------------- | +| `core:tray:allow-get-by-id` | Enables the `get_by_id` command without any pre-configured scope. | +| `core:tray:deny-get-by-id` | Denies the `get_by_id` command without any pre-configured scope. | +| `core:tray:allow-new` | Enables the `new` command without any pre-configured scope. | +| `core:tray:deny-new` | Denies the `new` command without any pre-configured scope. | +| `core:tray:allow-remove-by-id` | Enables the `remove_by_id` command without any pre-configured scope. | +| `core:tray:deny-remove-by-id` | Denies the `remove_by_id` command without any pre-configured scope. | +| `core:tray:allow-set-icon` | Enables the `set_icon` command without any pre-configured scope. | +| `core:tray:deny-set-icon` | Denies the `set_icon` command without any pre-configured scope. | +| `core:tray:allow-set-icon-as-template` | Enables the `set_icon_as_template` command without any pre-configured scope. | +| `core:tray:deny-set-icon-as-template` | Denies the `set_icon_as_template` command without any pre-configured scope. | +| `core:tray:allow-set-menu` | Enables the `set_menu` command without any pre-configured scope. | +| `core:tray:deny-set-menu` | Denies the `set_menu` command without any pre-configured scope. | +| `core:tray:allow-set-show-menu-on-left-click` | Enables the `set_show_menu_on_left_click` command without any pre-configured scope. | +| `core:tray:deny-set-show-menu-on-left-click` | Denies the `set_show_menu_on_left_click` command without any pre-configured scope. | +| `core:tray:allow-set-temp-dir-path` | Enables the `set_temp_dir_path` command without any pre-configured scope. | +| `core:tray:deny-set-temp-dir-path` | Denies the `set_temp_dir_path` command without any pre-configured scope. | +| `core:tray:allow-set-title` | Enables the `set_title` command without any pre-configured scope. | +| `core:tray:deny-set-title` | Denies the `set_title` command without any pre-configured scope. | +| `core:tray:allow-set-tooltip` | Enables the `set_tooltip` command without any pre-configured scope. | +| `core:tray:deny-set-tooltip` | Denies the `set_tooltip` command without any pre-configured scope. | +| `core:tray:allow-set-visible` | Enables the `set_visible` command without any pre-configured scope. | +| `core:tray:deny-set-visible` | Denies the `set_visible` command without any pre-configured scope. | + +## Webview + +### Default Permission + +The default permission, `core:webview:default`, includes the following: + +- `allow-get-all-webviews` +- `allow-webview-position` +- `allow-webview-size` +- `allow-internal-toggle-devtools` + +### Permission Table + +| Identifier | Description | +| --------------------------------------------- | -------------------------------------------------------------------------------- | +| `core:webview:allow-clear-all-browsing-data` | Enables the `clear_all_browsing_data` command without any pre-configured scope. | +| `core:webview:deny-clear-all-browsing-data` | Denies the `clear_all_browsing_data` command without any pre-configured scope. | +| `core:webview:allow-create-webview` | Enables the `create_webview` command without any pre-configured scope. | +| `core:webview:deny-create-webview` | Denies the `create_webview` command without any pre-configured scope. | +| `core:webview:allow-create-webview-window` | Enables the `create_webview_window` command without any pre-configured scope. | +| `core:webview:deny-create-webview-window` | Denies the `create_webview_window` command without any pre-configured scope. | +| `core:webview:allow-get-all-webviews` | Enables the `get_all_webviews` command without any pre-configured scope. | +| `core:webview:deny-get-all-webviews` | Denies the `get_all_webviews` command without any pre-configured scope. | +| `core:webview:allow-internal-toggle-devtools` | Enables the `internal_toggle_devtools` command without any pre-configured scope. | +| `core:webview:deny-internal-toggle-devtools` | Denies the `internal_toggle_devtools` command without any pre-configured scope. | +| `core:webview:allow-print` | Enables the `print` command without any pre-configured scope. | +| `core:webview:deny-print` | Denies the `print` command without any pre-configured scope. | +| `core:webview:allow-reparent` | Enables the `reparent` command without any pre-configured scope. | +| `core:webview:deny-reparent` | Denies the `reparent` command without any pre-configured scope. | +| `core:webview:allow-set-webview-focus` | Enables the `set_webview_focus` command without any pre-configured scope. | +| `core:webview:deny-set-webview-focus` | Denies the `set_webview_focus` command without any pre-configured scope. | +| `core:webview:allow-set-webview-position` | Enables the `set_webview_position` command without any pre-configured scope. | +| `core:webview:deny-set-webview-position` | Denies the `set_webview_position` command without any pre-configured scope. | +| `core:webview:allow-set-webview-size` | Enables the `set_webview_size` command without any pre-configured scope. | +| `core:webview:deny-set-webview-size` | Denies the `set_webview_size` command without any pre-configured scope. | +| `core:webview:allow-set-webview-zoom` | Enables the `set_webview_zoom` command without any pre-configured scope. | +| `core:webview:deny-set-webview-zoom` | Denies the `set_webview_zoom` command without any pre-configured scope. | +| `core:webview:allow-webview-close` | Enables the `webview_close` command without any pre-configured scope. | +| `core:webview:deny-webview-close` | Denies the `webview_close` command without any pre-configured scope. | +| `core:webview:allow-webview-hide` | Enables the `webview_hide` command without any pre-configured scope. | +| `core:webview:deny-webview-hide` | Denies the `webview_hide` command without any pre-configured scope. | +| `core:webview:allow-webview-position` | Enables the `webview_position` command without any pre-configured scope. | +| `core:webview:deny-webview-position` | Denies the `webview_position` command without any pre-configured scope. | +| `core:webview:allow-webview-show` | Enables the `webview_show` command without any pre-configured scope. | +| `core:webview:deny-webview-show` | Denies the `webview_show` command without any pre-configured scope. | +| `core:webview:allow-webview-size` | Enables the `webview_size` command without any pre-configured scope. | +| `core:webview:deny-webview-size` | Denies the `webview_size` command without any pre-configured scope. | + +## Window + +### Default Permission + +The default permission, `core:window:default`, includes the following: + +- `allow-get-all-windows` +- `allow-scale-factor` +- `allow-inner-position` +- `allow-outer-position` +- `allow-inner-size` +- `allow-outer-size` +- `allow-is-fullscreen` +- `allow-is-minimized` +- `allow-is-maximized` +- `allow-is-focused` +- `allow-is-decorated` +- `allow-is-resizable` +- `allow-is-maximizable` +- `allow-is-minimizable` +- `allow-is-closable` +- `allow-is-visible` +- `allow-is-enabled` +- `allow-title` +- `allow-current-monitor` +- `allow-primary-monitor` +- `allow-monitor-from-point` +- `allow-available-monitors` +- `allow-cursor-position` +- `allow-theme` +- `allow-internal-toggle-maximize` + +### Permission Table + +| Identifier | Description | +| ------------------------------------------------- | ------------------------------------------------------------------------------------- | +| `core:window:allow-available-monitors` | Enables the `available_monitors` command without any pre-configured scope. | +| `core:window:deny-available-monitors` | Denies the `available_monitors` command without any pre-configured scope. | +| `core:window:allow-center` | Enables the `center` command without any pre-configured scope. | +| `core:window:deny-center` | Denies the `center` command without any pre-configured scope. | +| `core:window:allow-close` | Enables the `close` command without any pre-configured scope. | +| `core:window:deny-close` | Denies the `close` command without any pre-configured scope. | +| `core:window:allow-create` | Enables the `create` command without any pre-configured scope. | +| `core:window:deny-create` | Denies the `create` command without any pre-configured scope. | +| `core:window:allow-current-monitor` | Enables the `current_monitor` command without any pre-configured scope. | +| `core:window:deny-current-monitor` | Denies the `current_monitor` command without any pre-configured scope. | +| `core:window:allow-cursor-position` | Enables the `cursor_position` command without any pre-configured scope. | +| `core:window:deny-cursor-position` | Denies the `cursor_position` command without any pre-configured scope. | +| `core:window:allow-destroy` | Enables the `destroy` command without any pre-configured scope. | +| `core:window:deny-destroy` | Denies the `destroy` command without any pre-configured scope. | +| `core:window:allow-get-all-windows` | Enables the `get_all_windows` command without any pre-configured scope. | +| `core:window:deny-get-all-windows` | Denies the `get_all_windows` command without any pre-configured scope. | +| `core:window:allow-hide` | Enables the `hide` command without any pre-configured scope. | +| `core:window:deny-hide` | Denies the `hide` command without any pre-configured scope. | +| `core:window:allow-inner-position` | Enables the `inner_position` command without any pre-configured scope. | +| `core:window:deny-inner-position` | Denies the `inner_position` command without any pre-configured scope. | +| `core:window:allow-inner-size` | Enables the `inner_size` command without any pre-configured scope. | +| `core:window:deny-inner-size` | Denies the `inner_size` command without any pre-configured scope. | +| `core:window:allow-internal-toggle-maximize` | Enables the `internal_toggle_maximize` command without any pre-configured scope. | +| `core:window:deny-internal-toggle-maximize` | Denies the `internal_toggle_maximize` command without any pre-configured scope. | +| `core:window:allow-is-closable` | Enables the `is_closable` command without any pre-configured scope. | +| `core:window:deny-is-closable` | Denies the `is_closable` command without any pre-configured scope. | +| `core:window:allow-is-decorated` | Enables the `is_decorated` command without any pre-configured scope. | +| `core:window:deny-is-decorated` | Denies the `is_decorated` command without any pre-configured scope. | +| `core:window:allow-is-enabled` | Enables the `is_enabled` command without any pre-configured scope. | +| `core:window:deny-is-enabled` | Denies the `is_enabled` command without any pre-configured scope. | +| `core:window:allow-is-focused` | Enables the `is_focused` command without any pre-configured scope. | +| `core:window:deny-is-focused` | Denies the `is_focused` command without any pre-configured scope. | +| `core:window:allow-is-fullscreen` | Enables the `is_fullscreen` command without any pre-configured scope. | +| `core:window:deny-is-fullscreen` | Denies the `is_fullscreen` command without any pre-configured scope. | +| `core:window:allow-is-maximizable` | Enables the `is_maximizable` command without any pre-configured scope. | +| `core:window:deny-is-maximizable` | Denies the `is_maximizable` command without any pre-configured scope. | +| `core:window:allow-is-maximized` | Enables the `is_maximized` command without any pre-configured scope. | +| `core:window:deny-is-maximized` | Denies the `is_maximized` command without any pre-configured scope. | +| `core:window:allow-is-minimizable` | Enables the `is_minimizable` command without any pre-configured scope. | +| `core:window:deny-is-minimizable` | Denies the `is_minimizable` command without any pre-configured scope. | +| `core:window:allow-is-minimized` | Enables the `is_minimized` command without any pre-configured scope. | +| `core:window:deny-is-minimized` | Denies the `is_minimized` command without any pre-configured scope. | +| `core:window:allow-is-resizable` | Enables the `is_resizable` command without any pre-configured scope. | +| `core:window:deny-is-resizable` | Denies the `is_resizable` command without any pre-configured scope. | +| `core:window:allow-is-visible` | Enables the `is_visible` command without any pre-configured scope. | +| `core:window:deny-is-visible` | Denies the `is_visible` command without any pre-configured scope. | +| `core:window:allow-maximize` | Enables the `maximize` command without any pre-configured scope. | +| `core:window:deny-maximize` | Denies the `maximize` command without any pre-configured scope. | +| `core:window:allow-minimize` | Enables the `minimize` command without any pre-configured scope. | +| `core:window:deny-minimize` | Denies the `minimize` command without any pre-configured scope. | +| `core:window:allow-monitor-from-point` | Enables the `monitor_from_point` command without any pre-configured scope. | +| `core:window:deny-monitor-from-point` | Denies the `monitor_from_point` command without any pre-configured scope. | +| `core:window:allow-outer-position` | Enables the `outer_position` command without any pre-configured scope. | +| `core:window:deny-outer-position` | Denies the `outer_position` command without any pre-configured scope. | +| `core:window:allow-outer-size` | Enables the `outer_size` command without any pre-configured scope. | +| `core:window:deny-outer-size` | Denies the `outer_size` command without any pre-configured scope. | +| `core:window:allow-primary-monitor` | Enables the `primary_monitor` command without any pre-configured scope. | +| `core:window:deny-primary-monitor` | Denies the `primary_monitor` command without any pre-configured scope. | +| `core:window:allow-request-user-attention` | Enables the `request_user_attention` command without any pre-configured scope. | +| `core:window:deny-request-user-attention` | Denies the `request_user_attention` command without any pre-configured scope. | +| `core:window:allow-scale-factor` | Enables the `scale_factor` command without any pre-configured scope. | +| `core:window:deny-scale-factor` | Denies the `scale_factor` command without any pre-configured scope. | +| `core:window:allow-set-always-on-bottom` | Enables the `set_always_on_bottom` command without any pre-configured scope. | +| `core:window:deny-set-always-on-bottom` | Denies the `set_always_on_bottom` command without any pre-configured scope. | +| `core:window:allow-set-always-on-top` | Enables the `set_always_on_top` command without any pre-configured scope. | +| `core:window:deny-set-always-on-top` | Denies the `set_always_on_top` command without any pre-configured scope. | +| `core:window:allow-set-closable` | Enables the `set_closable` command without any pre-configured scope. | +| `core:window:deny-set-closable` | Denies the `set_closable` command without any pre-configured scope. | +| `core:window:allow-set-content-protected` | Enables the `set_content_protected` command without any pre-configured scope. | +| `core:window:deny-set-content-protected` | Denies the `set_content_protected` command without any pre-configured scope. | +| `core:window:allow-set-cursor-grab` | Enables the `set_cursor_grab` command without any pre-configured scope. | +| `core:window:deny-set-cursor-grab` | Denies the `set_cursor_grab` command without any pre-configured scope. | +| `core:window:allow-set-cursor-icon` | Enables the `set_cursor_icon` command without any pre-configured scope. | +| `core:window:deny-set-cursor-icon` | Denies the `set_cursor_icon` command without any pre-configured scope. | +| `core:window:allow-set-cursor-position` | Enables the `set_cursor_position` command without any pre-configured scope. | +| `core:window:deny-set-cursor-position` | Denies the `set_cursor_position` command without any pre-configured scope. | +| `core:window:allow-set-cursor-visible` | Enables the `set_cursor_visible` command without any pre-configured scope. | +| `core:window:deny-set-cursor-visible` | Denies the `set_cursor_visible` command without any pre-configured scope. | +| `core:window:allow-set-decorations` | Enables the `set_decorations` command without any pre-configured scope. | +| `core:window:deny-set-decorations` | Denies the `set_decorations` command without any pre-configured scope. | +| `core:window:allow-set-effects` | Enables the `set_effects` command without any pre-configured scope. | +| `core:window:deny-set-effects` | Denies the `set_effects` command without any pre-configured scope. | +| `core:window:allow-set-enabled` | Enables the `set_enabled` command without any pre-configured scope. | +| `core:window:deny-set-enabled` | Denies the `set_enabled` command without any pre-configured scope. | +| `core:window:allow-set-focus` | Enables the `set_focus` command without any pre-configured scope. | +| `core:window:deny-set-focus` | Denies the `set_focus` command without any pre-configured scope. | +| `core:window:allow-set-fullscreen` | Enables the `set_fullscreen` command without any pre-configured scope. | +| `core:window:deny-set-fullscreen` | Denies the `set_fullscreen` command without any pre-configured scope. | +| `core:window:allow-set-icon` | Enables the `set_icon` command without any pre-configured scope. | +| `core:window:deny-set-icon` | Denies the `set_icon` command without any pre-configured scope. | +| `core:window:allow-set-ignore-cursor-events` | Enables the `set_ignore_cursor_events` command without any pre-configured scope. | +| `core:window:deny-set-ignore-cursor-events` | Denies the `set_ignore_cursor_events` command without any pre-configured scope. | +| `core:window:allow-set-max-size` | Enables the `set_max_size` command without any pre-configured scope. | +| `core:window:deny-set-max-size` | Denies the `set_max_size` command without any pre-configured scope. | +| `core:window:allow-set-maximizable` | Enables the `set_maximizable` command without any pre-configured scope. | +| `core:window:deny-set-maximizable` | Denies the `set_maximizable` command without any pre-configured scope. | +| `core:window:allow-set-min-size` | Enables the `set_min_size` command without any pre-configured scope. | +| `core:window:deny-set-min-size` | Denies the `set_min_size` command without any pre-configured scope. | +| `core:window:allow-set-minimizable` | Enables the `set_minimizable` command without any pre-configured scope. | +| `core:window:deny-set-minimizable` | Denies the `set_minimizable` command without any pre-configured scope. | +| `core:window:allow-set-position` | Enables the `set_position` command without any pre-configured scope. | +| `core:window:deny-set-position` | Denies the `set_position` command without any pre-configured scope. | +| `core:window:allow-set-progress-bar` | Enables the `set_progress_bar` command without any pre-configured scope. | +| `core:window:deny-set-progress-bar` | Denies the `set_progress_bar` command without any pre-configured scope. | +| `core:window:allow-set-resizable` | Enables the `set_resizable` command without any pre-configured scope. | +| `core:window:deny-set-resizable` | Denies the `set_resizable` command without any pre-configured scope. | +| `core:window:allow-set-shadow` | Enables the `set_shadow` command without any pre-configured scope. | +| `core:window:deny-set-shadow` | Denies the `set_shadow` command without any pre-configured scope. | +| `core:window:allow-set-size` | Enables the `set_size` command without any pre-configured scope. | +| `core:window:deny-set-size` | Denies the `set_size` command without any pre-configured scope. | +| `core:window:allow-set-size-constraints` | Enables the `set_size_constraints` command without any pre-configured scope. | +| `core:window:deny-set-size-constraints` | Denies the `set_size_constraints` command without any pre-configured scope. | +| `core:window:allow-set-skip-taskbar` | Enables the `set_skip_taskbar` command without any pre-configured scope. | +| `core:window:deny-set-skip-taskbar` | Denies the `set_skip_taskbar` command without any pre-configured scope. | +| `core:window:allow-set-theme` | Enables the `set_theme` command without any pre-configured scope. | +| `core:window:deny-set-theme` | Denies the `set_theme` command without any pre-configured scope. | +| `core:window:allow-set-title` | Enables the `set_title` command without any pre-configured scope. | +| `core:window:deny-set-title` | Denies the `set_title` command without any pre-configured scope. | +| `core:window:allow-set-title-bar-style` | Enables the `set_title_bar_style` command without any pre-configured scope. | +| `core:window:deny-set-title-bar-style` | Denies the `set_title_bar_style` command without any pre-configured scope. | +| `core:window:allow-set-visible-on-all-workspaces` | Enables the `set_visible_on_all_workspaces` command without any pre-configured scope. | +| `core:window:deny-set-visible-on-all-workspaces` | Denies the `set_visible_on_all_workspaces` command without any pre-configured scope. | +| `core:window:allow-show` | Enables the `show` command without any pre-configured scope. | +| `core:window:deny-show` | Denies the `show` command without any pre-configured scope. | +| `core:window:allow-start-dragging` | Enables the `start_dragging` command without any pre-configured scope. | +| `core:window:deny-start-dragging` | Denies the `start_dragging` command without any pre-configured scope. | +| `core:window:allow-start-resize-dragging` | Enables the `start_resize_dragging` command without any pre-configured scope. | +| `core:window:deny-start-resize-dragging` | Denies the `start_resize_dragging` command without any pre-configured scope. | +| `core:window:allow-theme` | Enables the `theme` command without any pre-configured scope. | +| `core:window:deny-theme` | Denies the `theme` command without any pre-configured scope. | +| `core:window:allow-title` | Enables the `title` command without any pre-configured scope. | +| `core:window:deny-title` | Denies the `title` command without any pre-configured scope. | +| `core:window:allow-toggle-maximize` | Enables the `toggle_maximize` command without any pre-configured scope. | +| `core:window:deny-toggle-maximize` | Denies the `toggle_maximize` command without any pre-configured scope. | +| `core:window:allow-unmaximize` | Enables the `unmaximize` command without any pre-configured scope. | +| `core:window:deny-unmaximize` | Denies the `unmaximize` command without any pre-configured scope. | +| `core:window:allow-unminimize` | Enables the `unminimize` command without any pre-configured scope. | +| `core:window:deny-unminimize` | Denies the `unminimize` command without any pre-configured scope. | diff --git a/src/content/docs/security/capabilities.mdx b/src/content/docs/security/capabilities.mdx index 6741a38507..c74e09fadb 100644 --- a/src/content/docs/security/capabilities.mdx +++ b/src/content/docs/security/capabilities.mdx @@ -227,3 +227,7 @@ Everything can be inlined into the `tauri.conf.json` but even a little more advanced configuration would bloat this file and the goal of this approach is that the permissions are abstracted away whenever possible and simple to understand. + +## Core Permissions + +A list of all core permissions can be found on the [Core Permissions](/reference/acl/core-permissions/) page.