Permissions reference

Permissions are the trust boundary of rumahl: new system capabilities always ship with a permission. This reference describes the groups.

App permissions

• AppStorage[Read/Write/Delete/Manage] — the app's storage (key-value, files, database)
• AppDatabaseSqlite/Manage — the app's SQLite database
• AppSchedule[Create/Read/Update/Delete] — scheduled tasks
• Messaging[Publish/Subscribe/Wildcard/Direct] — the messaging system
• Webhook[Create/Read/Update/Delete/Manage] — webhooks

OS permissions

• os.terminal — access to the integrated terminal
• os.network.write — change network configuration
• os.system.read — read system status and logs
• os.services — start, stop and restart services
• Further OS permissions follow the same naming convention

Runtime requests

Apps can request permissions at runtime (e.g. “App X wants to access files”). The user decides per request — rejections are possible at any time, and granted permissions can be revoked in the settings.