claude-code - 💡(How to fix) Fix [BUG] Permission prompt defaults to "Always allow" instead of "Allow once" - dangerous UX regression [3 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#48550Fetched 2026-04-16 06:57:02
View on GitHub
Comments
3
Participants
2
Timeline
12
Reactions
0
Timeline (top)
labeled ×4commented ×3mentioned ×2subscribed ×2

Error Message

Error Messages/Logs

RAW_BUFFERClick to expand / collapse

Preflight Checklist

  • I have searched existing issues and this hasn't been reported yet
  • This is a single bug report (please file separate reports for different bugs)
  • I am using the latest version of Claude Code

What's Wrong?

The permission prompt in Claude Code Desktop now defaults to "Always allow" instead of "Allow once". Users reflexively pressing Enter silently grant permanent permissions they never intended to give.

What Should Happen?

The default action should be "Allow once" (least-privilege). Additionally, a setting (e.g. defaultPermissionAction in settings.json) should allow users to configure which action is the default on the permission prompt.

Error Messages/Logs

Steps to Reproduce

Steps to Reproduce

Open Claude Code Desktop Ask Claude to do anything that triggers a permission prompt (e.g. run a bash command) Observe that "Always allow" is the pre-selected default action

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

No response

Claude Code Version

Claude 1.2581.0 (f10398) 2026-04-14T17:16:40.000Z

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

No response

extent analysis

TL;DR

The default permission prompt action in Claude Code Desktop should be changed from "Always allow" to "Allow once" to ensure least-privilege access.

Guidance

  • Review the code responsible for rendering the permission prompt to identify where the default action is set and update it to "Allow once".
  • Consider adding a setting, such as defaultPermissionAction in settings.json, to allow users to configure the default action.
  • Verify the change by reproducing the steps to trigger a permission prompt and checking that "Allow once" is the pre-selected default action.
  • Test the new setting to ensure it correctly updates the default action.

Example

No code snippet is provided as the issue does not include specific code details.

Notes

The issue is reported as a regression, indicating that the behavior was previously correct, so reviewing previous versions may help identify the cause of the change.

Recommendation

Apply a workaround by manually configuring the default permission action, if possible, until a fix is released, as the current behavior poses a security risk by defaulting to "Always allow".

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING