Allow URIs specified in file directives implicitly It seems to me that, by specifying that one wants to serve a given file at a specified URI, one is implying that this URI should be allowed.

table t : {A : int}

fun main () : transaction page =
    () <- dml (INSERT INTO t (A) VALUES (0));
    return (error <xml>No way, Jose!</xml>)