[Bug] Permission deny rules not enforced for file Read operations Windows

Resolved 💬 3 comments Opened Apr 12, 2026 by dungeonCrawlerDonut Closed Apr 16, 2026

Bug Description

  • OS: Windows 11 Home 10.0.26200
  • settings.json contents of each attempt
  • Steps to reproduce (deny rule for Read on a path, then successfully reading that path anyway)

Tried each of these formats
settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Write(C:/Users/abigail/Contacts/)",
"Edit(C:/Users/abigail/Contacts/
)",
"Read(C:/Users/abigail/Contacts/**)",
]
}
}

settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Write(C:/Users/abigail/Contacts/*)",
"Edit(C:/Users/abigail/Contacts/*)",
"Read(C:/Users/abigail/Contacts/*)",
]
}
}

settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Read(C:\\Users\\abigail\\Contacts\\)",
"Write(C:\\Users\\abigail\\Contacts\\
)",
"Edit(C:\\Users\\abigail\\Contacts\\**)",
]
}
}

settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Read(C:\\Users\\abigail\\Contacts\\*)",
"Write(C:\\Users\\abigail\\Contacts\\*)",
"Edit(C:\\Users\\abigail\\Contacts\\*)",
]
}
}

settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Read(/c/Users/abigail/Contacts/)",
"Write(/c/Users/abigail/Contacts/
)",
"Edit(/c/Users/abigail/Contacts/**)",
]
}
}

settings.json
{
"autoUpdatesChannel": "latest",
"permissions": {
"deny": [
"Read(/c/Users/abigail/Contacts/*)",
"Write(/c/Users/abigail/Contacts/*)",
"Edit(/c/Users/abigail/Contacts/*)",
]
}
}

Environment Info

  • Platform: win32
  • Terminal: null
  • Version: 2.1.104
  • Feedback ID: d14d8f76-2fe6-488d-8c51-be228548d8ec

Errors

[]

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗