The Capability is a signed blob used to delegate new permissions to read, write, or author as another identity.

It is used to grant signing permissions to other devices or people.

Each capability is a Resource.

Shape

Contains the following fields

    Signer

    Delegate – The Account ID of the identity receiving new capabilities

    Role

    Label

    Revoked – Boolean, true if the capability is being revoked

    Path

    Recursive

    Deps – The CIDs of capabilities to depend on. Used to form a chain of capabilities

    Signature – Cryptographic proof of this shape from the signer

Chaining

A capability might be granting permissions to another account, which might require a chain of capabilities.

Do you like what you are reading? Subscribe to receive updates.

Unsubscribe anytime