Repository navigation
Assisted Permissions mode in Enterprise Managed environments not working alongside disableBypassPermissionsMode #341390
Description
Given the following Enterprise Policy:
{
"permissions": {
"disableBypassPermissionsMode": "disable",
"deny": [
"Shell(rm -rf *)",
"Read(~/.ssh/**)"
]
}
}ls isn't even making it to the LLM-as-a-Judge so its triggering an Ask dialog even when the user is in Assisted Permissions.
This looks to be a bug in the SDK/Runtime.
Actual
Neither deny matches ls
→ server deny rules activate implicit default-ask
→ managedApprovalRequired=true
→ skip the judge and ask the human
Expected
| Effective permission decision | Manual | Assisted |
|---|---|---|
| Deny | Block | Block; do not invoke judge |
| Allow | Permit | Permit; do not invoke judge |
| Explicit ask | Ask user | Judge first; ask user unless judge approves |
| Implicit default-ask | Ask user | Judge first; ask user unless judge approves |
Existing permissions
deny -> block
allow -> permit
ask -> Assisted judge
approve -> permit
no / error / timeout -> ask user
Activity
agentHost: honor managed Assisted approval verdicts (#341889)
vs-code-engineering commentedon Oct 16, 2026
Sharing media and context from merged PR #341889 for verification:
Forward the SDK's derived permission prompt so an approving Assisted verdict permits a managed request once without prompting. Preserve managed one-time restrictions and sandbox safeguards.
lsnow properly goes through to the judge and deny is still respected:🤖 Authored with GitHub Copilot on behalf of Ross Wollman (@rwoll).
Source PR: #341889