|
1 | 1 | # Permissions |
2 | 2 |
|
3 | | -This section exposes security features available to be adopted in a |
4 | | -Node.js application. The available scopes are: |
| 3 | +Permissions can be used to control what system resources the |
| 4 | +Node.js process has access to or what actions the process can take |
| 5 | +with those resources. Permissions can also control what modules can |
| 6 | +be accessed by other modules. |
5 | 7 |
|
6 | | -* [Resource-based permissions](#resource-based-permissions) |
7 | | -* [Process-based permissions](#process-based-permissions) |
| 8 | +* [Module-based permissions](#module-based-permissions) control which files |
| 9 | + or URLs are available to other modules during application execution. |
| 10 | + This can be used to control what modules can be accessed by third-party |
| 11 | + dependencies, for example. |
8 | 12 |
|
9 | | -Resource-based permissions stands for the managment of modules using |
10 | | -policies. A policy can guarantee which module/resource is available |
11 | | -during the application execution. |
| 13 | +If you find a potential security vulnerability, please refer to our |
| 14 | +[Security Policy][]. |
12 | 15 |
|
13 | | -Process-based permissions stands for the management of resources such |
14 | | -as _File System_ or _Network_. A permission can be configured to restrict |
15 | | -access to specific resources, for instance, one can restrict access to |
16 | | -all the _File System_ write. |
17 | | - |
18 | | -Both permissions can be used together to provide a safer environment. |
19 | | - |
20 | | -**Note**: if you find a potential security vulnerability on Node.js, |
21 | | -refer to our [Security Policy][]. |
22 | | - |
23 | | -## Resource-based permissions |
| 16 | +## Module-based permissions |
24 | 17 |
|
25 | 18 | ## Policies |
26 | 19 |
|
@@ -447,9 +440,7 @@ not adopt the origin of the `blob:` URL. |
447 | 440 | Additionally, import maps only work on `import` so it may be desirable to add a |
448 | 441 | `"import"` condition to all dependency mappings. |
449 | 442 |
|
450 | | -## Process-based permissions |
451 | | - |
| 443 | +[Security Policy]: https://github.com/nodejs/node/blob/main/SECURITY.md |
452 | 444 | [import maps]: https://url.spec.whatwg.org/#relative-url-with-fragment-string |
453 | 445 | [relative-url string]: https://url.spec.whatwg.org/#relative-url-with-fragment-string |
454 | 446 | [special schemes]: https://url.spec.whatwg.org/#special-scheme |
455 | | -[Security Policy]: https://github.com/nodejs/node/blob/main/SECURITY.md |
0 commit comments