{"record":{"id":"201927b86b3d0ab0","repo":"openai/codex","slug":"readonly-capability-sid-string-missing","errorCode":null,"errorMessage":"readonly capability SID string missing","messagePattern":"readonly capability SID string missing","errorType":"exception","errorClass":"anyhow::Error","httpStatus":null,"severity":"error","filePath":"codex-rs/windows-sandbox-rs/src/spawn_prep.rs","lineNumber":309,"sourceCode":"                let _ = add_allow_ace(p, readonly_sid.as_ptr());\n            }\n        } else {\n            for p in &allow {\n                let Some(root_sid) = matching_root_capability(p, acl_sids.write_root_sids) else {\n                    continue;\n                };\n                let _ = ensure_allow_write_aces(p, &[root_sid.sid.as_ptr()]);\n            }\n        }\n        for p in &deny {\n            for root_sid in deny_root_capabilities_for_path(p, acl_sids.write_root_sids) {\n                let _ = add_deny_write_ace(p, root_sid.sid.as_ptr());\n            }\n        }\n        if !additional_deny_read_paths.is_empty() {\n            if let Some(readonly_sid) = acl_sids.readonly_sid {\n                let Some(readonly_sid_str) = acl_sids.readonly_sid_str else {\n                    anyhow::bail!(\"readonly capability SID string missing\");\n                };\n                sync_persistent_deny_read_acls(\n                    codex_home,\n                    readonly_sid_str,\n                    additional_deny_read_paths,\n                    readonly_sid.as_ptr(),\n                )?;\n            } else {\n                for root_sid in acl_sids.write_root_sids {\n                    sync_persistent_deny_read_acls(\n                        codex_home,\n                        &root_sid.sid_str,\n                        additional_deny_read_paths,\n                        root_sid.sid.as_ptr(),\n                    )?;\n                }\n            }\n        }","sourceCodeStart":291,"sourceCodeEnd":327,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/windows-sandbox-rs/src/spawn_prep.rs#L291-L327","documentation":"Error \"readonly capability SID string missing\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/windows-sandbox-rs/src/spawn_prep.rs:309 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}