openai/codex · error · io::Error

filesystem glob path `{path}` only supports `deny` access; u

Error message

filesystem glob path `{path}` only supports `deny` access; use an exact path or trailing `/**` for `{access}` subtree access

What it means

Error "filesystem glob path `{path}` only supports `deny` access; use an exact path or trailing `/**` for `{access}` subtree access" thrown in openai/codex.

Source

Thrown at codex-rs/core/src/config/permissions.rs:686

        )),
        None => {
            let base = parse_absolute_path(path)?;
            Ok(base.join(&subpath).to_string_lossy().to_string())
        }
    }
}

fn compile_read_write_glob_path(path: &str, access: FileSystemAccessMode) -> io::Result<&str> {
    if !contains_glob_chars(path) {
        return Ok(path);
    }

    let path_without_trailing_glob = remove_trailing_glob_suffix(path);
    if !contains_glob_chars(path_without_trailing_glob) {
        return Ok(path_without_trailing_glob);
    }

    Err(io::Error::new(
        io::ErrorKind::InvalidInput,
        format!(
            "filesystem glob path `{path}` only supports `deny` access; use an exact path or trailing `/**` for `{access}` subtree access"
        ),
    ))
}

fn unsupported_read_write_glob_paths(filesystem: &FilesystemPermissionsToml) -> Vec<String> {
    let mut patterns = Vec::new();
    for (path, permission) in &filesystem.entries {
        match permission {
            FilesystemPermissionToml::Access(access) => {
                if *access != FileSystemAccessMode::Deny
                    && contains_glob_chars(remove_trailing_glob_suffix(path))
                {
                    patterns.push(path.clone());
                }
            }

View on GitHub (pinned to 339751715c)

Solutions

1. Use `deny` access for the glob path, or use an exact path or trailing `/**` for `{access}` subtree access.

When it happens

Trigger: Thrown at codex-rs/core/src/config/permissions.rs:686 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of openai/codex@339751715c (2026-08-25). Data as JSON: /api/errors/c2c4181dbaff22b7. Report an issue: GitHub.