Permission control does not seem to be working.

[frDevByq]

Description

I configured the system to forbid reading application.yml, but it is still being read.

  "permission": {
    "read": {
      "application.yml": "deny",
      "application-*.yml": "deny",
      "*application.yml": "deny",
      "*application-*.yml": "deny",
      "*": "allow"
    },
    "*": "allow",
    "bash": {
      "*": "allow",
      "rm *": "ask"
    },
    "edit": "allow"
  }

Plugins

No response

OpenCode version

1.1.7

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

windows

Terminal

powershell

[github-actions[bot]]

This issue might be a duplicate of existing issues. Please check:

• #7474: Subagent permissions not enforced - configured restrictions ignored
• #7063: Permission denied, yet command is executed regardless
• #6892: MCP tool permissions not working after migration from tools to permissions
• #6527: Plan mode restrictions bypassed when spawning sub-agents
• #6020: Permission selection not respected

All of these issues indicate a systematic problem with the permission system not properly evaluating or enforcing configured deny rules. This appears to be related to a core issue with the permission configuration system.

Feel free to ignore if your specific case differs from these.

[pschiel]

your order is wrong. last rule that matches gets applied - in your case the "*": "allow" overrides the previous yaml read patterns

[HicaroD]

I am having a similar issue:

  "permission": {
    "*": "allow",
    "edit": "ask"
  }

Expected behavior: everything is allowed, except for "edit". "edit" should be asked. Actual behavior: "edit" behaves like "allowed", almost as if the second line of "permission" object is ignored.

[rekram1-node]

@HicaroD mind sharing output of:

opencode debug config

[frDevByq]

This configuration works, but I’m still very puzzled why a * has to be added before the matching pattern for it to work.

  "permission": {
    "read": {
      "application.yml": "deny",
      "application-*.yml": "deny",
      "*application.yml": "deny",
      "*application-*.yml": "deny"
    },
    "bash": {
      "*": "allow",
      "rm *": "ask"
    },
    "edit": "allow"
  },