Choose how Qoder CN requests approval before using files, the terminal, the network, and enabled tools.
Open Access permissions at the bottom of the task composer before sending a task or while continuing an existing task. Ask for approval is the default.
Changing the permission mode does not change the task workspace or execution mode.
When an approval request appears, review the exact command, file path, destination, and reason. Choose the approval scope offered by the dialog; deny the request when the target or impact is unclear.
Full access allows Qoder CN to read, modify, or delete files, run terminal commands, and access the internet without asking again.
You can return to Ask for approval or Auto approve from the composer at any time.
The selected workspace determines the main file boundary. Choose a local workspace, Worktree, or SSH workspace when creating the task; an existing task cannot switch between Local and Worktree modes.
Static Check, Lightweight Scan, and Deep Scan are separate from operation approvals. Configure them under Settings → Security.
For terminal controls, see Terminal. For code scanning, see Security and Access.
Choose an access-permission mode
| Option | Behavior | Recommended use |
|---|---|---|
| Ask for approval | Always asks before running commands, editing files outside the workspace, or accessing the network. | New or unfamiliar projects and tasks that need close review. |
| Auto approve | Asks only when Qoder CN detects a potential risk. | Routine work in a trusted, clearly scoped project. |
| Full access | Does not ask again and can freely use files, the terminal, and the network. | Controlled work after you have reviewed the scope and consequences. |
What each mode permits
| Operation | Ask for approval | Auto approve | Full access |
|---|---|---|---|
| Read or edit files inside the workspace | Runs automatically. | Runs automatically when no risk is detected. | Runs automatically. |
| Modify files outside the workspace | Asks first. | Asks when potential risk is detected. | Runs automatically. |
| Run terminal commands | Read-only commands can run automatically; other commands ask first. | Qoder CN checks the command and asks when potential risk is detected. | Runs automatically. |
| Access the internet | Asks first. | Asks when potential risk is detected. | Runs automatically. |