You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
ImprovementsKind: in v2.1.314,
ImprovementsSection of the release
Unclear Nothing says which setting this is or what condition turns it into deny_all.
What
Claude Code reads policy limits, meaning restrictions an organization can place on what it is allowed to do. For one of them, an unset or switched-off value used to always mean "off". Now, when a further check passes, that same value means "deny_all", which blocks everything that limit covers.
Why
A restriction that used to stay off by default can now apply under some condition. Some features could then be blocked for those users.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtNothing says which setting this is or what condition turns it into deny_all.
