Allow Git Writes without Approval is BAD

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

When disabled, git is read-only, when enabled my command allow-list is obsolete but i still want to double check before the commit goes through.

So you introduced the worst of both worlds. Could you maybe not introduce Junior/AI Slop?

Steps to Reproduce

have an actual working workflow with non-intrusive git commands allow list (git status/diff/add/log/show)

and then try to use this abomination of a “feature”…

Expected Behavior

instead of making git readonly which sounds a lot like an AI Slop shortcut (this isn’t your Browser, btw), maybe just forbid those intrusive git commands?

Operating System

Windows 10/11

Version Information

Version: 2.4.23 (user setup)
VSCode Version: 1.105.1
Commit: 379934e04d2b3290cf7aefa14560f942e4212920
Date: 2026-01-29T21:24:23.350Z
Build Type: Stable
Release Track: Default
Electron: 39.2.7
Chromium: 142.0.7444.235
Node.js: 22.21.1
V8: 14.2.231.21-electron.0
OS: Windows_NT x64 10.0.26200

For AI issues: which model did you use?

composer

For AI issues: add Request ID with privacy disabled

irrelevant

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

Hey, thanks for the feedback.

I get the issue. Right now it’s basically a binary choice. Either git is fully read-only, or everything is allowed without respecting your allowlist. It’s awkward when you want to allow status/diff/add, but still require approval for commit.

We’ve seen a similar request before. This user asks for a denylist to block specific commands like git push, rm -rf, etc.: Huge fan of "allowlist" terminal (NOT sandbox!), however there is a need for a companion "denylist" as well!. In short, you’re asking for the same thing. More granular control over git commands.

I’ve passed the feedback to the team. For now, the workaround is to keep “Allow Git Writes without Approval” turned off and manually approve git commit/git push, while adding other git commands to the allowlist. Those should still work for read operations.

1 Like

yeah that would be nice if that could happen, then the whole post wouldn’t be necessary, but composer cant even ask for permission, every git commit is automatically prevented and composer identifies that as read-only.

Please tell me that your logical fallacies, obvious regurgitated misunderstandings here within your statement and the typical gpt conversation style is just a coincidence. Because your IDE’s supposedly “high” Opus 4.5 is also subpar and the combination of both would force me to re-evaluate using Cursor…

LLMs are a productivity tool not a replacement for responsibility.