It would be more intuitive if "allow": none meant "no-one can do this"

[simonw]

Now that I'm starting to write alternative plugins to control permissions - see #818 - I think I need an easy way to tell Datasette "no-one has permission to do X unless a plugin says otherwise".

One relatively intuitive way to do that could be like this:

{
  "databases": {
    "fixtures": {
      "allow": null
    }
  }
}

Right now I think that opens up permissions to everyone, which isn't as obvious.

[simonw]

Actually I'm not sure about this. If "allow": null means "no-one can do this", what's the allow block syntax for "everyone can do this"?

It could be "allow": {} - but that's not intuitive because normally the allow block shows keys that need to match. {} suggests to me that no matches are possible.

So I think I'm going to stick with the current mechanism, which is that "allow": null means "anyone can do this" and "allow": {} means "no-one can do this".