logoalt Hacker News

thegagne • yesterday at 9:19 PM • 1 reply • view on HN

Really like this and think we need something like this in every major language, especially to address supply chain attack stuff.

A couple of thoughts:

- would really like to have the option to make things more granular… things like “which dns/tls will this have access to?”, “which file/folder?” - probably would be helpful to have permissions to be kinda two sided, like “this function needs tls”, and then on the import side “allow this function tls access to this host in particular”.


Replies

ch4s3 • yesterday at 9:29 PM

Thanks! It can be file and url level granular, there’s a capabilities page that mentions that[1]. Caps and needs are the two sides. A module function needs File.write, and you can grant a narrower cap to a single folder or file.

[1] https://march-lang.org/docs/capabilities/#choosing-the-right...

➕ show 1 reply