keeps asking for permission even though full access is turned on and I selected "allow all like this"

Open 💬 7 comments Opened May 19, 2026 by matthargett

💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of the Codex App are you using (From “About Codex” dialog)?

26.513.31313 (2867)

What subscription do you have?

Pro

What platform is your computer?

_No response_

What issue are you seeing?

even with Full Access permissions on, I get prompted to manually approve this commandline:

/bin/zsh -lc '
set -u
profiles=build_wgpu_29_ios_release_lto/profiles
app=build_wgpu_29_ios_release_lto/Apps/Playground/Release-iphoneos/Playground.app
device_dev=C7A1D5AD-C89D-5E03-99B9-5E65EEC30486
xcrun devicectl device install app --device "$device_dev" "$app" > "$profiles/step4-command-pool-pop-iphonexs-ddi.log" 2>&1
'

even when I select Yes, and don't ask again in this session multiple times in a row, it still keeps stopping work for me to manually approve.

What steps can reproduce the bug?

Feedback ID: 019e3826-2f29-7601-b52b-a19b2e01dbe7

What is the expected behavior?

Full access should mean full access, but at the very least when I select Yes, and don't ask again in this session, it shouldn't re-prompt me every single time it runs xctrace again. this is a new regression as of a few days ago, this problem didn't happen in this profiling+optimization workflow before.

Additional information

_No response_

View original on GitHub ↗

7 Comments

github-actions[bot] contributor · 3 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

#22511
#22090
#23105

Powered by Codex Action

matthargett · 3 months ago

I wasn't using goal mode

thyaravind · 2 months ago

This is happening for me in Version 26.616.32156 and is super annoying

merlin-von-deggendorf · 2 months ago

same here, out of nowhere all of a sudden I get requested for permissions on vs code even if I'm in full access mode.

pebarone · 2 months ago

As a workaround I'm using codex --yolo

Seems to sortout the issue. Use it with caution, of course :)

merlin-von-deggendorf · 2 months ago

same here, out of nowhere all of a sudden I get requested for permissions on vs code even if I'm in full access mode. :(

fixed it by changing permission to ask and then to full access again.

toumix-agents · 9 days ago

Reproduced in Codex Desktop on macOS during a GitHub Actions task.

The user had explicitly selected Full Access and repeatedly instructed the agent not to request approval again, but the active turn still arrived with a managed/workspace-write permission profile and restricted network. The agent was therefore required to emit sandbox_permissions=require_escalated plus a justification, which generated another approval prompt. A later turn finally arrived as danger-full-access / approval policy never, so the effective permission state changed between turns without the user's intent changing.

This was not specific to xcrun: it occurred while inspecting and rerunning a GitHub Actions workflow. It stranded the task because each fallback generated another prompt after the user had explicitly selected “never ask.”

Sanitized diagnostics observed in the same task:

error connecting to api.github.com
elevated subprocess: Operation not permitted for a workspace that the normal process could read
elevated SSH subprocess: No user exists for uid 502

Expected: when Full Access / approval_policy=never is active, resumed turns should inherit that state and the runtime should ignore/strip model-supplied escalation requests instead of surfacing approval UI.