permissions.workspace.filesystem won't work

Open 💬 0 comments Opened May 12, 2026 by yongzheJIN

What version of the Codex App are you using (From “About Codex” dialog)?

26.506.31421

What subscription do you have?

With the setting of [permissions.workspace.filesystem] but it is not working

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

With the setting of config.tom;
`approval_policy = "on-request"
sandbox_mode = "workspace-write"
default_permissions = "workspace"

[windows]
sandbox = "elevated"

[permissions.workspace.filesystem]
":project_roots" = { "." = "write", "**/*.env" = "none", ".env" = "none" }
glob_scan_max_depth = 3`

The processs

  1. Help me to change the content of .env. just add test=111
  2. (codex): use the command 'get-content' grep the data.
  3. (codex) change the content.

The restraction:

  1. Auto-approval been shutdown.

What steps can reproduce the bug?

  1. Put the config.toml in the /project folder/.codex/config.toml
  2. just type help me to change the content of .env. just add test=111

What is the expected behavior?

Excepted as permission to write even read the data

Additional information

_No response_

View original on GitHub ↗