Tag archive
Linux file permissions explained with real chmod, chown, and umask examples — the numeric mode math, setuid/setgid, and the sticky bit on /tmp.
Learn the basics of Linux file permissions and how to use the chmod command to control access.
What each permission mode runs without asking, which one a session starts in, and the two defaultMode values that silently do not apply in project set
The deny rules that stop Claude Code force-pushing, how to cover -f and --force-with-lease and reordered options, and why a deny rule is a safety net
Enqueueing work does not pause permission checks. A worker that later updates a document, sends an...
Put mcp__server or mcp__server__tool in permissions.allow to stop the prompts, why an allow wildcard needs an mcp__<server>__ prefix, and why parenthe
An OAuth scope like files:read says the token may call read endpoints. It does not say this token may...
Hiding a button in the UI is not authorization. A user who never sees Delete can still call the...
A JWT or session that carries tenant_id proves which tenant the caller claims to belong to. It does...
A common shortcut: cache “user X can edit document Y” for a few minutes to save policy...
Having access to a project, workspace, or tenant does not mean every nested action is allowed. Read...
Joining a workspace or tenant often unlocks a long list of APIs. That membership proves the caller...