> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qoder.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Permissions

> Choose how Qoder requests approval before using files, the terminal, the network, and enabled tools.

Open **Access permissions** at the bottom of the task composer before sending a task or while continuing an existing task. **Ask every time** is the default.

Changing the permission mode does not change the task workspace or execution mode.

## Choose an access-permission mode

| Option             | Behavior                                                                                            | Recommended use                                                     |
| ------------------ | --------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
| **Ask every time** | Always asks before running commands, editing files outside the workspace, or accessing the network. | New or unfamiliar projects and tasks that need close review.        |
| **Auto approve**   | Asks only when Qoder detects a potential risk.                                                      | Routine work in a trusted, clearly scoped project.                  |
| **Full access**    | Does not ask again and can freely use files, the terminal, and the network.                         | Controlled work after you have reviewed the scope and consequences. |

### What each mode permits

| Operation                               | Ask every time                                                      | Auto approve                                                       | Full access         |
| --------------------------------------- | ------------------------------------------------------------------- | ------------------------------------------------------------------ | ------------------- |
| Read or edit files inside the workspace | Runs automatically.                                                 | Runs automatically when no risk is detected.                       | Runs automatically. |
| Modify files outside the workspace      | Asks first.                                                         | Asks when potential risk is detected.                              | Runs automatically. |
| Run terminal commands                   | Read-only commands can run automatically; other commands ask first. | Qoder checks the command and asks when potential risk is detected. | Runs automatically. |
| Access the internet                     | Asks first.                                                         | Asks when potential risk is detected.                              | Runs automatically. |

When an approval request appears, review the exact command, file path, destination, and reason. Choose the approval scope offered by the dialog; deny the request when the target or impact is unclear.

### Enterprise restrictions on access modes

Enterprise policies can restrict Full Access or Auto approval. A disabled mode cannot be newly selected, and affected tasks switch to an available approval mode. Subsequent tool operations follow the updated policy; calls that have already started may still complete.

Contact your administrator to change enterprise policy. If a mode becomes available again, review and select the appropriate mode yourself rather than assuming the task will automatically regain broader access.

## Use Full access carefully

Full access allows Qoder to read, modify, or delete files, run terminal commands, and access the internet without asking again.

<Warning>Before enabling **Full access**, confirm the workspace, task scope, credentials, network destinations, and commands. Do not use it for an unfamiliar repository, untrusted web content, production operations, or a task that handles secrets unless unrestricted execution is necessary and monitored.</Warning>

You can return to **Ask every time** or **Auto approve** from the composer at any time.

## Related security controls

The selected workspace determines the main file boundary. Choose a local workspace, Worktree, or SSH workspace when creating the task; an existing task cannot switch between Local and Worktree modes.

**Static Check**, **Lightweight Scan**, and **Deep Scan** are separate from operation approvals. Configure them under **Settings → Security**.

For terminal controls, see [Terminal](/qoder/terminal-and-sandbox). For code scanning, see [Security and Access](/qoder/security-and-authorization).