Permission control does not seem to be working. #7554

Activity

1. frDevByq

   added

   bugSomething isn't workingSomething isn't working

   on Jan 10, 2026
2. github-actions

   assigned

   rekram1-node

   on Jan 10, 2026
3. github-actions

   added

   windows

   on Jan 10, 2026
4. github-actions commented on Jan 10, 2026

   

   github-actionsBot

   on Jan 10, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • [Security Bug] Subagent permissions not enforced - configured restrictions ignored #7474: Subagent permissions not enforced - configured restrictions ignored
   • Permission denied, yet command is executed regardless #7063: Permission denied, yet command is executed regardless
   • MCP tool permissions not working after migration from tools to permissions #6892: MCP tool permissions not working after migration from tools to permissions
   • [CRITICAL Security Issue/Bug] Plan mode restrictions bypassed when spawning sub-agents #6527: Plan mode restrictions bypassed when spawning sub-agents
   • Permission selection not respected #6020: Permission selection not respected

   All of these issues indicate a systematic problem with the permission system not properly evaluating or enforcing configured deny rules. This appears to be related to a core issue with the permission configuration system.

   Feel free to ignore if your specific case differs from these.
5. pschiel commented on Jan 11, 2026

   

   pschiel

   on Jan 11, 2026

   Last edited by pschiel

   Contributor

   More actions

   your order is wrong. last rule that matches gets applied - in your case the "*": "allow" overrides the previous yaml read patterns
6. HicaroD commented on Jan 11, 2026

   

   HicaroD

   on Jan 11, 2026

   More actions

   I am having a similar issue:

     "permission": {
       "*": "allow",
       "edit": "ask"
     }

   Expected behavior: everything is allowed, except for "edit". "edit" should be asked.
   Actual behavior: "edit" behaves like "allowed", almost as if the second line of "permission" object is ignored.
7. rekram1-node commented on Jan 11, 2026

   

   rekram1-node

   on Jan 11, 2026

   Contributor

   More actions

   @HicaroD mind sharing output of:

   opencode debug config
8. frDevByq commented on Jan 12, 2026

   

   frDevByq

   on Jan 12, 2026

   Author

   More actions

   This configuration works, but I’m still very puzzled why a * has to be added before the matching pattern for it to work.

     "permission": {
       "read": {
         "application.yml": "deny",
         "application-*.yml": "deny",
         "*application.yml": "deny",
         "*application-*.yml": "deny"
       },
       "bash": {
         "*": "allow",
         "rm *": "ask"
       },
       "edit": "allow"
     },
9. frDevByq

   closed this as completedon Jan 12, 2026