{"version":"2.1.323","anchor":"permissionsblockfiletoolreadsoutsideworkingdirectories-hono","canonical_anchor":"read-outside-working-directory-block-settings-named-in-permi","heading":"New file-tool read block that only the launching program can set","tier":"use","area":"Permissions","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/permissionsblockfiletoolreadsoutsideworkingdirectories-hono","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### New file-tool read block that only the launching program can set\n\npermissions.blockFileToolReadsOutsideWorkingDirectories blocks file-tool reads outside working folders, but works only when passed through --settings\n\n**What**\n\nClaude Code has a new setting, `permissions.blockFileToolReadsOutsideWorkingDirectories`. It stops the file tools reading outside the working directories, the folders the session was told to work in. The file tools are how Claude reads and edits files.\n\n- With the setting on, a permission check that used to approve a read automatically now refuses to, when a further condition holds. The findings do not show what that condition tests.\n\n- A blocked read shows: \"Reads outside the working directories are blocked (permissions.blockFileToolReadsOutsideWorkingDirectories).\"\n\n- This setting, along with `blockReadsExemptPaths` and `workingDirectoriesAsGiven`, is now ignored in settings files and managed settings. Only the program that starts Claude Code can set them, through `--settings`. A warning says so.\n\n- The warning suggests settings files use `permissions.blockReadsOutsideWorkingDirectories` instead, which also covers shell commands.\n\n- A second warning appears if something other than the launching program changed the related environment during a session.\n\n**Why**\n\nIf you put these keys in a settings file or managed settings, they will not take effect. Use `permissions.blockReadsOutsideWorkingDirectories` there instead. Programs that embed Claude Code, such as SDK hosts, need to pass these keys through `--settings`.\n\n- Area: Permissions\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 2\/5\n- Scope: both\n- Heads-up: no"}