Why does the Sandboxed terminal asks for permission

I would have expected permissions to work this way:

  • Ask always, with allowlist
  • Never ask / YOLO
  • Sandbox
    • Within Sandbox: Never ask
    • If needs to run outside: Ask + allowlist

However, what Cursor does is apply the same “Ask always, with allowlist” also in the Sandbox. So rather than a permission mode it’s just another security layer that does not really change the permission mode.

I find this unhelpful. I know that within the sandbox it could still delete all my code or whatever, but it cannot hurt the rest of my system and that’s the relevant part IMO.

So not sure if I am understanding the idea behind this wrong…or if this is a feature request :slight_smile:

3 Likes

I second this. It’s really anoying to have to have to keep click alllow to Auto-run in the sandbox just to see a few seconds later asking again for the same exact permission. This is exausting and serves no purpose other then creating friction on using the CUrsor CLI.

1 Like