Opencode ignoring deny permissions? #25515

Activity

1. mejobloggs-cw

   added

   bugSomething isn't workingSomething isn't working

   on May 3, 2026
2. github-actions commented on May 3, 2026

   

   github-actionsBot

   on May 3, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • opencode not respecting permissions #8832: opencode not respecting permissions — same symptom of permission rules being ignored
   • Permissions ignored #16331: Permissions ignored — similar report of configured deny rules not being enforced
   • Permission rules not enforced for "edit" operation performed by Task subagents #23519: Permission rules not enforced for "edit" operation performed by Task subagents — specifically about edit deny not being enforced
   • Granular permissions not working (or documentation bad?) #20307: Granular permissions not working (or documentation bad?) — same class of issue with per-agent permission config not working

   If your issue is distinct from the above (e.g. it reproduces without subagents, or on a specific version), please note that in the issue.
3. thdxr commented on May 3, 2026

   

   thdxr

   on May 3, 2026

   Member

   More actions

   can you share opencode debug config
4. mejobloggs-cw commented on May 3, 2026

   

   mejobloggs-cw

   on May 3, 2026

   Author

   More actions

   opencode debug config

   {
     "$schema": "https://opencode.ai/config.json",
     "snapshot": false,
     "disabled_providers": [
       "opencode"
     ],
     "provider": {
       "copilot": {}
     },
     "model": "github-copilot/gpt-5.4",
     "agent": {
       "build": {
         "mode": "primary",
         "model": "github-copilot/gpt-5.4",
         "variant": "medium",
         "reasoningEffort": "medium",
         "textVerbosity": "low",
         "options": {
           "reasoningEffort": "medium",
           "textVerbosity": "low"
         },
         "permission": {}
       },
       "plan": {
         "mode": "primary",
         "model": "github-copilot/gpt-5.4",
         "variant": "high",
         "reasoningEffort": "high",
         "textVerbosity": "low",
         "permission": {
           "edit": "deny",
           "bash": "deny"
         },
         "options": {
           "reasoningEffort": "high",
           "textVerbosity": "low"
         }
       },
       "plan-expensive": {
         "description": "A higher-capability planning mode for difficult design, refactoring, and codebase analysis tasks.",
         "mode": "primary",
         "model": "github-copilot/gpt-5.5",
         "variant": "high",
         "reasoningEffort": "high",
         "textVerbosity": "low",
         "permission": {
           "edit": "deny",
           "bash": "deny"
         },
         "options": {
           "reasoningEffort": "high",
           "textVerbosity": "low"
         }
       }
     },
     "watcher": {
       "ignore": [
         ".git/**",
         ".vs/**",
         "bin/**",
         "obj/**",
         "node_modules/**",
         "dist/**",
         "build/**",
         "coverage/**",
         "**/*.map",
         "**/*.min.*",
         "*.log"
       ]
     },
     "mode": {},
     "plugin": [],
     "command": {},
     "username": "xxxx"
   }
   
5. thdxr commented on May 3, 2026

   

   thdxr

   on May 3, 2026

   Member

   More actions

   i tested that config and it works fine. you might want to have it deny the task: { general: "deny"} so it can't spawn a subagent that can edit
6. thdxr

   assigned

   jlongster

   on May 3, 2026
7. thdxr

   added

   coreAnything pertaining to core functionality of the application (opencode server stuff)Anything pertaining to core functionality of the application (opencode server stuff)

   and removed

   bugSomething isn't workingSomething isn't working

   coreAnything pertaining to core functionality of the application (opencode server stuff)Anything pertaining to core functionality of the application (opencode server stuff)

   on May 3, 2026
8. mejobloggs-cw commented on May 3, 2026

   

   mejobloggs-cw

   on May 3, 2026

   Author

   More actions

   With my config, using "Plan-Expensive", it will create a new file 100% of the time with the prompt:

   ```create a todo.md file that says hello world"``

   I confirm that by adding permission:

   "task": { "general": "deny"}

   Plan-Expensive can no longer create the file.

   But why does it ignore "edit": "deny" and "bash": "deny" ?

   It seems like a permissions vulnerability if an agent is explicitly denied write access, but can just spawn a subagent that's allowed write access
9. github-actions commented on Jul 4, 2026

   

   github-actionsBot

   on Jul 4, 2026 – with GitHub Actions

   Contributor

   More actions

   To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.
10. github-actions

    closed this as not plannedon Jul 4, 2026