Allow URIs specified in file directives implicitly It seems to me that, by specifying that one wants to serve a given file at a specified URI, one is implying that this URI should be allowed.

table t : {A : int, B : string}

task initialize = fn () => dml (UPDATE t SET A = A + 1 WHERE TRUE);
                     dml (UPDATE t SET B = 'q' WHERE TRUE)