Asking for action too much

Resolved 💬 3 comments Opened Mar 18, 2026 by Chavao Closed Mar 18, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of Codex CLI is running?

0.115.0

What subscription do you have?

Plus

Which model were you using?

gpt-5.4 high

What platform is your computer?

Linux 6.8.0-106-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

Tilix 1.9.6 + zsh 5.9

What issue are you seeing?

In version 0.115.0, it asks for permission for every single file that needs to be changed, sometimes even to read it.

I tried adding

approval_policy = "on-request"
sandbox_mode    = "workspace-write"

to my ~/.codex/config.toml, but it didn’t work either.

So I removed it, downgraded the Codex CLI version to 0.114.0, and everything is working perfectly again.

Thread id with 0.115.0: 019d00a5-ac85-71c0-9035-14872345e4b4 ❌
Thread id with 0.114.0: 019d00b1-6aac-73c1-a0d0-4a901103a59e ✅

What steps can reproduce the bug?

Uploaded thread: 019d00a5-ac85-71c0-9035-14872345e4b4

What is the expected behavior?

_No response_

Additional information

---

Environment

Ubuntu 24.04.4 LTS
Tilix 1.9.6
zsh 5.9

current ~/.codex/config.toml

personality = "pragmatic"
model = "gpt-5.4"
model_reasoning_effort = "high"
model_reasoning_summary = "concise"
plan_mode_reasoning_effort = "high"

[features]
remote_models = true
collaboration_modes = true

[analytics]
enabled = false

[tui]
theme = "dracula"
status_line = ["model-with-reasoning", "git-branch", "context-used", "five-hour-limit", "weekly-limit"]

[projects]
(...)

View original on GitHub ↗

3 Comments

github-actions[bot] contributor · 5 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #13663
  • #13587
  • #13394
  • #13476

Powered by Codex Action

mberg2007 · 5 months ago

This! In 0-115-0 codex is asking for permissions to run every little command it wants to run, like grep, sort, rg for files inside the repository even with full-auto and workspace write. This was NOT the case before 0-115-0.

In the current release I have to babysit Codex giving it permission to run everything. Like in this example:

You approved codex to run nl -ba etc/release_ddv.sh | sed -n '53,55p;81,83p'

Codex asks if it is okay to run that command and commands starting with "sed -n '53,55p;81,83p". As if that specific command will ever run again in this session. I mean ... what is going on here?

Permissions seem completely broken in 0-115-0. Please fix this!

etraut-openai contributor · 5 months ago

Duplicate of #14936