Deno.symlink requests extra full access permissions
Deno.* APIs
Why are extra permissions being requested? I want to restrict the scriptβs access to a specific folder, not grant it permission to read and write anywhere.
DENO_TRACE_PERMISSIONS=1 deno run --allow-read=test --allow-write=test link.ts
β Deno requests write access. β β Requested by
Deno.symlink()
Deno.symlink()
API. β ββ op_fs_symlink_async (ext:core/00_infra.js:289:44) β ββ Object.symlink (ext:deno_fs/30_fs.js:531:9) β ββ file:///.../link.ts:1:6 β β Learn more at: https://docs.deno.com/go/--allow-write β β Run again with --allow-write to bypass this prompt.
API. β β To see a stack trace for this prompt, set the DENO_TRACE_PERMISSIONS environmental variable. β β Learn more at: https://docs.deno.com/go/--allow-read β β Run again with --allow-read to bypass this prompt.
A guide to Deno's security model and permissions system. Learn about secure defaults, permission flags, runtime prompts, and how to safely execute code with granular access controls.
A guide to Deno's security model and permissions system. Learn about secure defaults, permission flags, runtime prompts, and how to safely execute code with granular access controls.