{"name":"sandbox.filesystem.allowRead","slug":"sandbox-filesystem-allowread","family":"setting","title":"Settings keys","noun":"settings key","description":"Re-open reading inside a region [`denyRead`](#sandbox-filesystem-denyread) blocks","description_source":"docs","described_by":{"doc":"claude-code\/settings-reference","title":"All settings"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":{"version":"2.1.257","released_at":"2026-09-01 17:15:33","spans":2}},"aliases":[],"entries":[{"version":"2.1.299","anchor":"sandbox-prompt-gains-windows-localhost-and-profile-access-gu","heading":"Claude Code gives Windows-specific advice when sandboxed commands fail","line":"On Windows, the sandbox instructions now cover localhost limits, profile folder reads, certificate issues and placeholder files","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text"},{"version":"2.1.299","anchor":"windows-sandbox-filesystem-grant-checks-rewritten","heading":"Windows sandbox drops some file access grants","line":"On Windows, sandbox read and write grants that cover your home folder, a Claude Code config folder or a device path are now dropped","released_at":"2026-10-14 00:23:19","reason":"named in this entry, found in this entry's text"},{"version":"2.1.268","anchor":"gatewayinternalnetworks-added-to-managed-settings-merge-exce","heading":"gatewayInternalNetworks added to managed-settings merge exception list","line":"gatewayInternalNetworks added to the list of managed-settings fields that replace rather than merge","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text"},{"version":"2.1.257","anchor":"managedsettings-merge-mode-composition-rules-made-explicit","heading":"managedSettings 'merge' mode composition rules made explicit and expanded","line":"Managed settings merge mode now documents which fields the helper replaces wholesale rather than merging.","released_at":"2026-09-01 17:15:33","reason":"found in this entry's text"}],"entries_total":4,"docs":[{"source":"claude-code","path":"settings-reference","title":"All settings","documented":true},{"source":"claude-code","path":"managed-settings","title":"Deploy managed settings","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/code","title":"Code in Claude Desktop on 3P","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration","title":"Configuration reference","documented":false}],"docs_total":5,"gates":[],"related":[{"name":"sandbox.filesystem","slug":"sandbox-filesystem","description":"Control which paths [sandboxed](\/docs\/en\/sandboxing#filesystem-isolation) commands can read and write"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/sandbox-filesystem-allowread","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}