Codex IDE extension keeps asking for edit approval after "don't ask for this session" / Full access

What version of the VS Code extension are you using?

Unknown. User is using the Codex IDE extension inside Cursor. They can provide the exact version if needed.

What subscription do you have?

Unknown.

Which IDE are you using?

Cursor.

What platform is your computer?

Linux, based on user agent/context: X11 Linux x86_64. Exact distro/kernel unknown.

What issue are you seeing?

The Codex IDE extension keeps asking for permission before edits even after the user clicks the option equivalent to "don't ask for this session". The permissions menu only shows:

• Default permissions
• Auto-review
• Full access

The user selected Full access, but the same behavior continues: Codex still asks for approval for edits.

The user is specifically talking about the IDE extension, not the Codex terminal/CLI. CLI flags or commands are not relevant to this report.

What steps can reproduce the bug?

1. Open a project in Cursor.
2. Open the Codex IDE extension panel.
3. Start a Codex chat.
4. Ask Codex to edit a normal project file.
5. When prompted for permission, click the option equivalent to "don't ask for this session".
6. Also switch permissions to Full access from the menu showing Default permissions / Auto-review / Full access.
7. Ask Codex to make another normal edit.
8. Codex still asks for approval again.

What is the expected behavior?

After choosing "don't ask for this session" or selecting Full access, Codex should not repeatedly ask for permission for normal edits inside the trusted/opened workspace during the same session.

What do you see instead?

Codex continues asking for approval for edits despite Full access and session-level approval being selected.

Additional information

The user reports this is happening inside Cursor with the Codex IDE extension. They are frustrated because the visible UI does not match older documented/mentioned approval modes such as Chat/Agent/Agent Full Access. Their current UI only exposes Default permissions, Auto-review, and Full access.

This may be related to existing reports where Full access or "always allow"/session approval is not respected by the IDE extension.