{"record":{"id":"ff35f95446afb8c6","repo":"openai/codex","slug":"unsupported-filesystem-permissions-for-windows-san","errorCode":null,"errorMessage":"unsupported filesystem permissions for Windows sandbox setup","messagePattern":"unsupported filesystem permissions for Windows sandbox setup","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"codex-rs/windows-sandbox-rs/src/setup.rs","lineNumber":328,"sourceCode":"    let file_system = file_system.materialize_project_roots_with_workspace_roots(workspace_roots);\n    let command_cwd = AbsolutePathBuf::from_absolute_path(command_cwd)?;\n    resolve_windows_deny_read_paths(&file_system, &command_cwd)\n        .map(|paths| {\n            paths\n                .into_iter()\n                .map(AbsolutePathBuf::into_path_buf)\n                .collect()\n        })\n        .map_err(|err| anyhow!(err))\n}\n\nfn run_setup_refresh_inner(\n    request: SandboxSetupRequest<'_>,\n    overrides: SetupRootOverrides,\n    offline_proxy_settings_override: Option<&OfflineProxySettings>,\n) -> Result<()> {\n    if !request.permissions.is_enforceable_by_windows_sandbox() {\n        anyhow::bail!(\"unsupported filesystem permissions for Windows sandbox setup\");\n    }\n    let (read_roots, write_roots) = build_payload_roots(&request, &overrides);\n    let deny_read_paths = build_payload_deny_read_paths(overrides.deny_read_paths);\n    let deny_write_paths = build_payload_deny_write_paths(&request, overrides.deny_write_paths);\n    let offline_proxy_settings =\n        offline_proxy_settings_for_request(&request, offline_proxy_settings_override);\n    let payload = ElevationPayload {\n        version: SETUP_VERSION,\n        offline_username: OFFLINE_USERNAME.to_string(),\n        online_username: ONLINE_USERNAME.to_string(),\n        codex_home: request.codex_home.to_path_buf(),\n        command_cwd: request.command_cwd.to_path_buf(),\n        read_roots,\n        write_roots,\n        deny_read_paths,\n        deny_write_paths,\n        proxy_ports: offline_proxy_settings.proxy_ports,\n        allow_local_binding: offline_proxy_settings.allow_local_binding,","sourceCodeStart":310,"sourceCodeEnd":346,"githubUrl":"https://github.com/openai/codex/blob/339751715c64496cb86246bfb3935f40e309dd3d/codex-rs/windows-sandbox-rs/src/setup.rs#L310-L346","documentation":"Error \"unsupported filesystem permissions for Windows sandbox setup\" thrown in openai/codex.","triggerScenarios":"Thrown at codex-rs/windows-sandbox-rs/src/setup.rs:328 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"339751715c64496cb86246bfb3935f40e309dd3d","analyzedAt":"2026-08-25T05:35:09.876Z","schemaVersion":2},"datasetVersion":"2026-08-25T06:17:31.827Z"}