Permissions

Nothing changes a file or starts a process without a decision: yours at a question, or one you wrote down in advance. Reading inside the workspace never asks; a read that leads outside it puts the path to you first.

• What you are asked, and what each answer means
• Rules: allow, ask and deny
• Modes: ask, allowEdits and fullAccess
• Reaching outside the working directory
• What an allow rule really grants