GitHub issue #5140 in anthropics/claude-code, opened 2025-08-05 by siraj-samsudeen, records a report that user-level permissions in ~/.claude/settings.json are not enforced during command execution even though they appear as loaded in /permissions; the same permissions work when placed in project-level .settings.local.json.
Verbatim Excerpts from Cited Records
“User-level permissions in ~/.claude/settings.json are not being enforced during command execution, even though they appear as loaded in the /permissions command.”
·
anthropics/claude-code (issue 5140 opening body, Bug Description section)
·
2025-08-05T09:03:40Z
·GitHub Issue ↗
“The same permissions work correctly when placed in project-level .settings.local.json but fail when moved to user-level settings.”
·
anthropics/claude-code (issue 5140 opening body, Bug Description section)
·
2025-08-05T09:03:40Z
·GitHub Issue ↗
“All commands require manual approval even when listed in user-level permissions”
·
anthropics/claude-code (issue 5140 opening body, Actual Behavior section)
·
2025-08-05T09:03:40Z
·GitHub Issue ↗
Counter-record: No in-thread refutation of the reported permission behavior as of 2026-10-12: 25 comments discuss the user-level permission failure. The report notes the permissions were auto-generated by Claude Code and copied from .settings.local.json, and that MCP wildcard permissions also fail at user level.
Falsification probe: If issue #5140 is deleted without archive, if the author edits the opening body so the quoted sentences no longer match verbatim, or if the author/maintainers post a definitive retraction showing the behavior was misattributed, this claim drops to Withdrawn.
Audit verification: Verified 100% continuous verbatim substring against official GitHub REST API by
scripts/verify_claim_verbatim.py.