Designing APIs Where Permissions Are Part of the Type System

Most APIs treat permissions as something that happens after the code has already decided what it...