With sufficient metadata about resources this would be perfectly feasible. My thought, though, is that maintaining that metadata (so-and-so needs access to suc

With sufficient metadata about resources this would be perfectly feasible. My thought, though, is that maintaining that metadata (so-and-so needs access to such-and-such, which changes oh-so-often and which is typically a binary blob 0.5-3MB, or whatever) would in the short term be more work than just writing the interfaces by hand. For large systems it might work, but man, who's going to want to fix the system that writes the APIs when it breaks?