Global "allow": ["*"] not overriding project-level permissions — Grep still prompts

Bug

Global ~/.claude/settings.json has:

{
  "permissions": {
    "allow": ["*"],
    "deny": []
  }
}

Despite this, the built-in Grep tool still prompts for permission during conversations.

Expected behavior

"allow": ["*"] in global settings should allow all tools unconditionally, regardless of project-level settings.

Environment

• Claude Code CLI on Linux
• Project-level .claude/settings.json and .claude/settings.local.json exist with specific Bash(...) allow lists but no deny entries