[web-devel] Abstracting permissions with Yesod