scslab/hails — pull request #12 by deian (2012-02-27 19:28:09+00:00)
Title: cleanup of http serfver

minor clean up of the loading and executing app.

The app privileges are set as the underlying privileges of the app. it is important that the app use 'dropPrivileges' when executing code it does not trust. Let's see how this plays out - it might be that this is too 'relaxed' and can lead to app authros writing code that may be exploitable by provides. E.g., as a provider I can write some malicious code that will use the underlying privileges which the app author might not have dropped. In that sense, we usually would want an app author to use withDB as follows

withPrivileges noPrivs $ withDB "providerDB" $ ....