权限控制 #

┌─────────────────────────────────────────────────────────────┐
│                      权限模型                                │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│  ┌─────────────┐    ┌─────────────┐    ┌─────────────┐    │
│  │  Capability │    │ Permission  │    │   Scope     │    │
│  │  能力配置   │───►│   权限      │───►│   范围      │    │
│  └─────────────┘    └─────────────┘    └─────────────┘    │
│                                                             │
│  Capability: 定义窗口可以做什么                              │
│  Permission: 定义具体权限                                    │
│  Scope: 定义权限的作用范围                                   │
│                                                             │
└─────────────────────────────────────────────────────────────┘

// src-tauri/capabilities/default.json
{
    "$schema": "https://schema.tauri.app/config/2/capability",
    "identifier": "default",
    "description": "Default capability for the main window",
    "windows": ["main"],
    "permissions": [
        "core:default",
        "shell:allow-open",
        "dialog:allow-open"
    ]
}

// src-tauri/capabilities/default.json
{
    "identifier": "default",
    "windows": ["main", "settings"],
    "permissions": [
        "core:default",
        "fs:default"
    ]
}

// src-tauri/capabilities/guest.json
{
    "identifier": "guest",
    "windows": ["guest"],
    "permissions": [
        "core:default"
    ]
}

{
    "identifier": "fs-restricted",
    "windows": ["main"],
    "permissions": [
        {
            "identifier": "fs:allow-read-text-file",
            "allow": [
                { "path": "$APPDATA/**" },
                { "path": "$DOCUMENT/**" }
            ]
        },
        {
            "identifier": "fs:allow-write-text-file",
            "allow": [
                { "path": "$APPDATA/myapp/**" }
            ]
        }
    ]
}

core:default          默认核心权限集
core:app:default      应用默认权限
core:app:allow-app-hide
core:app:allow-app-show
core:window:default   窗口默认权限
core:window:allow-close
core:window:allow-minimize
core:window:allow-maximize
core:event:default    事件默认权限
core:event:allow-emit
core:event:allow-listen

fs:default            默认文件系统权限
fs:allow-read-text-file
fs:allow-write-text-file
fs:allow-read-dir
fs:allow-exists
fs:allow-mkdir
fs:allow-remove
fs:allow-rename
fs:allow-copy-file

shell:default         默认 Shell 权限
shell:allow-open      允许打开外部程序
shell:allow-execute   允许执行命令

dialog:default        默认对话框权限
dialog:allow-open     允许打开文件选择
dialog:allow-save     允许保存对话框
dialog:allow-message  允许消息对话框
dialog:allow-ask      允许询问对话框

// src-tauri/src/permissions.rs
use tauri::permission::{Permission, PermissionSet};

pub fn define_permissions() -> PermissionSet {
    PermissionSet::new("my-app")
        .add_permission(Permission::new(
            "allow-sensitive-operation",
            "Allow sensitive operation",
        ))
        .add_permission(Permission::new(
            "deny-sensitive-operation",
            "Deny sensitive operation",
        ))
}

// src-tauri/src/lib.rs
mod permissions;

fn main() {
    tauri::Builder::default()
        .permission(permissions::define_permissions())
        .run(tauri::generate_context!())
        .expect("error while running tauri application");
}

{
    "permissions": [
        "my-app:allow-sensitive-operation"
    ]
}

use tauri::command;

#[command]
async fn sensitive_operation(app: tauri::AppHandle) -> Result<(), String> {
    // 检查权限
    if !app.has_permission("my-app:allow-sensitive-operation") {
        return Err("Permission denied".to_string());
    }
    
    // 执行操作
    Ok(())
}

use tauri::Manager;

#[command]
async fn check_and_execute(
    app: tauri::AppHandle,
    window: tauri::Window,
) -> Result<String, String> {
    // 获取窗口能力
    let capability = window.capability();
    
    // 检查权限
    if capability.has_permission("fs:allow-read-text-file") {
        // 有权限，执行操作
        Ok("Has permission".to_string())
    } else {
        Err("Permission denied".to_string())
    }
}

{
    "identifier": "fs:allow-read-text-file",
    "allow": [
        { "path": "$HOME/**" },
        { "path": "$DOCUMENT/**" },
        { "path": "$DOWNLOAD/**" }
    ]
}

{
    "identifier": "http:default",
    "allow": [
        { "url": "https://api.example.com/**" },
        { "url": "https://cdn.example.com/**" }
    ]
}

{
    "identifier": "shell:allow-execute",
    "allow": [
        {
            "name": "git",
            "cmd": "git",
            "args": ["status", "log", "diff"]
        }
    ]
}

{
    "identifier": "file-operations",
    "description": "File operations permission group",
    "permissions": [
        "fs:allow-read-text-file",
        "fs:allow-write-text-file",
        "fs:allow-read-dir",
        "fs:allow-exists"
    ]
}

{
    "permissions": [
        "file-operations"
    ]
}

{
    "identifier": "extended",
    "extends": ["default"],
    "permissions": [
        "fs:allow-write-text-file"
    ]
}

{
    "identifier": "restricted",
    "extends": ["default"],
    "permissions": [
        "fs:deny-write-text-file"
    ]
}

// ✅ 好：只授予需要的权限
{
    "permissions": [
        "fs:allow-read-text-file"
    ]
}

// ❌ 差：授予过多权限
{
    "permissions": [
        "fs:default"
    ]
}

// 只读窗口
{
    "identifier": "viewer",
    "windows": ["viewer"],
    "permissions": [
        "fs:allow-read-text-file"
    ]
}

// 编辑窗口
{
    "identifier": "editor",
    "windows": ["editor"],
    "permissions": [
        "fs:allow-read-text-file",
        "fs:allow-write-text-file"
    ]
}

# 检查权限配置
cargo tauri permission list

# 验证权限
cargo tauri permission verify