[Bug] Permission denial for files not enforced in read operations

Question

**Bug Description**
Claude is able to read a file that is explicitely denied in the global settings.json file.
My settings include this:
```
  "permissions": {
    "deny": [
      "Read(**/local_exec.yaml)",
      "Edit(**/local_exec.yaml)",
      "Write(**/local_exec.yaml)",
      "Bash(**/local_exec.yaml)"
    ]
  },
```

I asked Claude to read a dummy file with that name and it was able to do it. Upon asking it why it was able to read it, it said itself that this is a bug.

**Environment Info