fix(fs): app scopes not properly enabling paths (#1774)

Author: lucasfernog

.changes/fix-fs-app-scopes.md

@@ -0,0 +1,5 @@
+---
+"fs": patch
+---
+
+Fix `scope-app`, `scope-app-recursive` and `scope-index` not properly enabling the application paths.

examples/api/src-tauri/gen/schemas/desktop-schema.json

@@ -52,7 +52,6 @@ const BASE_DIR_VARS: &[&str] = &[
     "TEMPLATE",
     "VIDEO",
     "RESOURCE",
-    "APP",
     "LOG",
     "TEMP",
     "APPCONFIG",
@@ -118,7 +117,7 @@ path = "${upper}/**"
 
 [[permission]]
 identifier = "scope-{lower}"
-description = "This scope permits access to all files and list content of top level directories in the `${upper}`folder."
+description = "This scope permits access to all files and list content of top level directories in the `${upper}` folder."
 
 [[permission.scope.allow]]
 path = "${upper}"

examples/api/src-tauri/gen/schemas/mobile-schema.json

@@ -270,7 +270,7 @@ class FileHandle extends Resource {
    * @example
    * ```typescript
    * import { open, BaseDirectory } from "@tauri-apps/plugin-fs"
-   * // if "$APP/foo/bar.txt" contains the text "hello world":
+   * // if "$APPCONFIG/foo/bar.txt" contains the text "hello world":
    * const file = await open("foo/bar.txt", { baseDir: BaseDirectory.AppConfig });
    * const buf = new Uint8Array(100);
    * const numberOfBytesRead = await file.read(buf); // 11 bytes

plugins/fs/build.rs

@@ -0,0 +1,114 @@
+"$schema" = "schemas/schema.json"
+
+# Scopes Section
+# This section contains scopes, which define file level access
+
+[[permission]]
+identifier = "scope-app-recursive"
+description = "This scope permits recursive access to the complete application folders, including sub directories and files."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG"
+[[permission.scope.allow]]
+path = "$APPCONFIG/**"
+
+[[permission.scope.allow]]
+path = "$APPDATA"
+[[permission.scope.allow]]
+path = "$APPDATA/**"
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA"
+[[permission.scope.allow]]
+path = "$APPLOCALDATA/**"
+
+[[permission.scope.allow]]
+path = "$APPCACHE"
+[[permission.scope.allow]]
+path = "$APPCACHE/**"
+
+[[permission.scope.allow]]
+path = "$APPLOG"
+[[permission.scope.allow]]
+path = "$APPLOG/**"
+
+[[permission]]
+identifier = "scope-app"
+description = "This scope permits access to all files and list content of top level directories in the application folders."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG"
+[[permission.scope.allow]]
+path = "$APPCONFIG/*"
+
+[[permission.scope.allow]]
+path = "$APPDATA"
+[[permission.scope.allow]]
+path = "$APPDATA/*"
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA"
+[[permission.scope.allow]]
+path = "$APPLOCALDATA/*"
+
+[[permission.scope.allow]]
+path = "$APPCACHE"
+[[permission.scope.allow]]
+path = "$APPCACHE/*"
+
+[[permission.scope.allow]]
+path = "$APPLOG"
+[[permission.scope.allow]]
+path = "$APPLOG/*"
+
+[[permission]]
+identifier = "scope-app-index"
+description = "This scope permits to list all files and folders in the application directories."
+
+[[permission.scope.allow]]
+path = "$APPCONFIG"
+
+[[permission.scope.allow]]
+path = "$APPDATA"
+
+[[permission.scope.allow]]
+path = "$APPLOCALDATA"
+
+[[permission.scope.allow]]
+path = "$APPCACHE"
+
+[[permission.scope.allow]]
+path = "$APPLOG"
+
+# Sets Section
+# This section combines the scope elements with enablement of commands
+
+[[set]]
+identifier = "allow-app-read-recursive"
+description = "This allows full recursive read access to the complete application folders, files and subdirectories."
+permissions = ["read-all", "scope-app-recursive"]
+
+[[set]]
+identifier = "allow-app-write-recursive"
+description = "This allows full recursive write access to the complete application folders, files and subdirectories."
+permissions = ["write-all", "scope-app-recursive"]
+
+[[set]]
+identifier = "allow-app-read"
+description = "This allows non-recursive read access to the application folders."
+permissions = ["read-all", "scope-app"]
+
+[[set]]
+identifier = "allow-app-write"
+description = "This allows non-recursive write access to the application folders."
+permissions = ["write-all", "scope-app"]
+
+[[set]]
+identifier = "allow-app-meta-recursive"
+description = "This allows full recursive read access to metadata of the application folders, including file listing and statistics."
+permissions = ["read-meta", "scope-app-recursive"]
+
+[[set]]
+identifier = "allow-app-meta"
+description = "This allows non-recursive read access to metadata of the application folders, including file listing and statistics."
+permissions = ["read-meta", "scope-app-index"]

plugins/fs/guest-js/index.ts

@@ -16,7 +16,7 @@ path = "$APPCACHE/**"
 
 [[permission]]
 identifier = "scope-appcache"
-description = "This scope permits access to all files and list content of top level directories in the `$APPCACHE`folder."
+description = "This scope permits access to all files and list content of top level directories in the `$APPCACHE` folder."
 
 [[permission.scope.allow]]
 path = "$APPCACHE"

plugins/fs/permissions/app.toml

@@ -16,7 +16,7 @@ path = "$APPCONFIG/**"
 
 [[permission]]
 identifier = "scope-appconfig"
-description = "This scope permits access to all files and list content of top level directories in the `$APPCONFIG`folder."
+description = "This scope permits access to all files and list content of top level directories in the `$APPCONFIG` folder."
 
 [[permission.scope.allow]]
 path = "$APPCONFIG"

plugins/fs/permissions/autogenerated/base-directories/app.toml

@@ -16,7 +16,7 @@ path = "$APPDATA/**"
 
 [[permission]]
 identifier = "scope-appdata"
-description = "This scope permits access to all files and list content of top level directories in the `$APPDATA`folder."
+description = "This scope permits access to all files and list content of top level directories in the `$APPDATA` folder."
 
 [[permission.scope.allow]]
 path = "$APPDATA"