Capabilities and app permissions
Understand the public authority model native AythurOS applications use to access protected platform resources.
Last updated
A native AythurOS application receives explicit authority for protected resources rather than gaining broad access simply because it is running.
Quick answer
A capability represents permission to perform specific operations on a particular resource or service. Possessing a path, identifier, or resource name does not by itself grant authority.
Applications should request only the access required for the task they are performing.
What application developers need to know
Use the public SDK APIs for protected operations. Those APIs expose the permission and capability behavior that applications are expected to handle.
Applications must be prepared for access to be unavailable, denied, revoked, or otherwise constrained by the platform.
The exact APIs and user-facing permission flows will be documented in the developer reference as they become stable.