{"version":"2.1.323","anchor":"path-permission-rules-negated-globs-and-handling-rewor","canonical_anchor":"path-permission-rules-negated-globs-and-handling-rewor","heading":"File path permission rules handle negated patterns and ** differently","tier":"notice","area":"Permissions","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/path-permission-rules-negated-globs-and-handling-rewor","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### File path permission rules handle negated patterns and `**` differently\n\nPath permission rules now let a negated `!**` pattern cover everything below its folder, and allow rules written as negations are checked last\n\n**What**\n\nPermission rules are entries in your settings that allow or deny Claude Code access to files by path. They can use wildcard patterns, such as `**`, which stands for any number of nested folders. A pattern starting with `!` is a negation, meaning \"everything except this\". Claude Code now prepares these rules differently:\n\n- A negated pattern such as `!**` now matches everything below the folder it starts from.\n\n- Allow rules that are negations are now placed last when rules are checked.\n\n- An error while matching a rule against ignore patterns is now caught and handled, instead of breaking the check.\n\n- A rule that cannot be read is no longer treated as matching the literal path it spells out.\n\nThe new handling falls back to on when the server sends nothing.\n\n**Why**\n\nThis changes which file paths are allowed or denied. If you use negated patterns or `**` in your permission rules, check that they still allow and deny what you expect.\n\n- Flag `tengu_vivid_wreath`: Not enough to say (read for one account on one subscription tier against v2.1.323; this account: no value returned, anonymous baseline: no value returned, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: yes"}