Configure permissions changedpermissions
Upstream edited this page at 11 Oct 2026 19:38 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 11 Oct 2026 20:07 UTC.
Upstream edited
Recorded here
Lines+1added
Lines−0removed
From line
676
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits70to this page, all time
The whole hunk
from line 676, old and new numbered
/
from line 676
676676* Content-scoped ask rules like `Bash(git push *)` still force a prompt
677677* Explicit deny rules still apply
678678* `rm` or `rmdir` commands that target a [critical path](/docs/en/permission-modes#critical-paths) still go through the regular permission flow
679* Other sandboxed commands can go through the regular permission flow too, as [Auto-allow mode](/docs/en/sandboxing#auto-allow-mode) describes
679680
680681Commands that won't run sandboxed, such as excluded commands, respect the bare `Bash` ask rule as usual. See [sandbox modes](/docs/en/sandboxing#sandbox-modes) to change this behavior.
681682
No line in this hunk matches that.