[Haskell-cafe] no Web-Security component in Haskell?
thomas at koch.ro
Sat May 23 13:49:07 UTC 2015
// moving the question with more info from haskell-cafe to web-devel
I already wrote a message with the same subject to haskell-cafe without reply.
I did not found anything comparable to Spring Security (Java) or Symfony
Security (PHP) in Haskell. Both components are used in web applications to
grant or deny access to resources based on roles, ACLs or custom voters.
A naive strategy would be to port the concepts of both components, which are
very similar, to Haskell. They represent a lot of accumulated knowledge from
many experts about web security.
Or are there better ways to do web security in a powerful language like
There was some unfinished role-based-access-control effort in snap that has
been removed from git now.
There seem to be a more modern (and more complex) thing than Role-Based-
Access-Control now, XACML which is used inside Red Hats JBoss.
Regards, Thomas Koch
More information about the Haskell-Cafe