tauri-plugins-workspace/examples/api/src-tauri/capabilities/base.json

{
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "run-app-base",
  "description": "Base permissions to run the app",
  "windows": ["main"],
  "permissions": [
    "log:default",
    {
      "identifier": "http:default",
      "allow": [
        "https://tauri.app",
        {
          "url": "http://localhost:3003"
        }
      ]
    },
    "core:default",
    "fs:default",
    "core:window:allow-minimize",
    "core:window:allow-maximize",
    "core:window:allow-unmaximize",
    "core:window:allow-close",
    "core:window:allow-start-dragging",
    "notification:default",
    "os:allow-platform",
    "dialog:allow-open",
    "dialog:allow-ask",
    "dialog:allow-save",
    "dialog:allow-confirm",
    "dialog:allow-message",
    {
      "identifier": "shell:allow-spawn",
      "allow": [
        {
          "name": "sh",
          "cmd": "sh",
          "args": [
            "-c",
            {
              "validator": ".+"
            }
          ]
        },
        {
          "name": "cmd",
          "cmd": "cmd",
          "args": [
            "/C",
            {
              "validator": ".+"
            }
          ]
        }
      ]
    },
    "shell:default",
    "shell:allow-kill",
    "shell:allow-stdin-write",
    "process:allow-exit",
    "process:allow-restart",
    "clipboard-manager:allow-read-text",
    "clipboard-manager:allow-write-text",
    "clipboard-manager:allow-read-image",
    "clipboard-manager:allow-write-image",
    "fs:allow-open",
    "fs:allow-write",
    "fs:allow-read",
    "fs:allow-rename",
    "fs:allow-mkdir",
    "fs:allow-remove",
    "fs:allow-write-text-file",
    "fs:scope-download-recursive",
    "fs:scope-resource-recursive",
    {
      "identifier": "fs:scope-appdata-recursive",
      "allow": [
        {
          "path": "$APPDATA/db/**"
        }
      ],
      "deny": ["$APPDATA/db/*.stronghold"]
    },
    "store:default",
    "opener:default",
    {
      "identifier": "opener:allow-open-path",
      "allow": [{ "path": "$APPDATA" }, { "path": "$APPDATA/**" }]
    }
  ]
}