Project threads ignore the permission rules in my repository's .claude/settings…
Status Open
Reported on v2.1.288
Maintainer reply None cached
Activity 0 comments · opened Oct 3, 2026
What happened
Project threads ignore the permission rules in my repository's .claude/settings.json.
Setup: a Claude Code project with one repository (rangashetty/saysolmelu-website). Its .claude/settings.json on main contains:
{ "permissions": { "allow": ["WebFetch", "WebSearch"] } }
The Projects docs say cloud threads in a single-repo project apply these rules. New threads still ask me to approve every web page.
What the thread's debug log shows:
- "Ignoring 2 permissions.allow entries from .claude/settings.json: this workspace has not been trusted." The cloud checkout is never marked trusted (no hasTrustDialogAccepted in ~/.claude.json), so the rules are dropped.
- Even after marking the workspace trusted by hand and seeing the rules load, WebFetch still prompts, and each prompt follows "ccr webfetch-proxy fetch error: PROVENANCE_REQUIRED". So the cloud fetch proxy asks for approval no matter what the rules say.
Expected: one-repo projects honor repo permission rules, as documented, and there is some supported way to give a blanket approval for read-only web fetches in project threads.
Claude Code 2.1.288, cloud project thread, auto mode, 2026-10-03.
Environment
- Filed from: Report a problem in Claude Code
- Project ID:
chan_01VLrXhKTzTMwY4iiQFPb2dM - Thread ID:
cmsg_01VLrXhKTzTMwY4iiQFPb2dM5fA5vxZUBtViN6ti4bpCUB