I would have expected permissions to work this way:
- Ask always, with allowlist
- Never ask / YOLO
- Sandbox
- Within Sandbox: Never ask
- If needs to run outside: Ask + allowlist
However, what Cursor does is apply the same “Ask always, with allowlist” also in the Sandbox. So rather than a permission mode it’s just another security layer that does not really change the permission mode.
I find this unhelpful. I know that within the sandbox it could still delete all my code or whatever, but it cannot hurt the rest of my system and that’s the relevant part IMO.
So not sure if I am understanding the idea behind this wrong…or if this is a feature request ![]()