alt Hacker NewsTo me (where English is a second language), Allowlist and denylist seem unclearer. Is it a block list, a exclude list, or a permission list? Allow/deny would lead me to the last one, as in authenticate users who has some permissions but not others.
Blacklist and whitelist would be closer to include/exclude, so the replacement would be a includelist and excludelist, or include/exclude as shorthand.
That's fair!
I feel like a permission list is kind of a superset of a block list and an exclude list. Or they're all different perspectives/solutions to the same kind of problem, that a permission list is the more generalizable solution for.
Or it's a way of framing the problem that doesn't embed the "exclusion" idea in the naming.
And it kinda bridges over to the idea of Access Control Lists a bit better?