[BUG]

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

I have a file in the folder /.claude/settings.json and y try to read a entry in the appsettins.json in a project and claude code allow to read this entries, this is my settings.json:

{
"permissions": {
"deny": [
"Read(/appsettings.json)",
"Read(/appsettings.*.json)",
"Read(/app.config)",
"Read(/App.config)",
"Read(/web.config)",
"Read(/Web.config)",
"Read(**/Web.*.config)",
"Read(**/*.exe.config)",
"Read(**/*.dll.config)",
"Read(/nlog.config)",
"Read(/NLog.config)",
"Read(/secrets.json)",
"Read(/usersecrets.json)",
"Read(**/*.user)"
],
"ask": []
}
}

What Should Happen?

Claude shouldn't be able to read those files that are marked with deny.

Error Messages/Logs

Steps to Reproduce

1 - Run claude
2- ask: can you read the "BaseUri" entry in appsettings.json for the project XXX
3- claude response with the value of the entry

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.14

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_