macOS 27.3 may change the way you grant AI agents full disk access, here's how

Last month, Apple announced that it would tighten privacy controls in a future macOS update, in response to AI agents demanding full disk access and then being with users’ data without their full knowledge. Now we have an idea of what the changes could look like.

IN his blog postApple has announced that apps will require “very explicit user action” to have full disk access on your Mac. At the time of the announcement, Apple didn’t make it very clear what this would actually mean. Now we have an idea of what’s to come.

Code sorter pdf published on X that Apple will get rid of a clever loophole that developers could use to make it easier for users to enable Full Disk Access. In current versions of macOS, if an application requests a file that would require full disk access, the system denies the request and logs the application as an option in Settings to allow full disk access.

At that point, developers often prompt users to open this section of the Settings app and toggle the switch.

Starting with macOS 27.3, applications that request files outside of the permission range will no longer be logged, and as a result will not appear as an option to quickly toggle full disk access according to the pdf leak.

macOS 27.3 begins implementing changes to Full Disk Access (FDA). Here’s what “very explicit user action” might mean.

When an application tries to read a protected file without FDA, macOS does not prompt the user for permission. Instead, it will automatically deny access and record that… https://t.co/zjUuEh7EIb

— pdfu (@itspdfu) November 7, 2026

Is it better?

At this point, developers still can ask the user drag the application icon to the Settings panel to allow full disk access, even if the feature flag for the above change is enabled. It still doesn’t seem to me that you’ll need a “very explicit user action” to allow full disk access, but it’s possible that this will change in the future. All of this is still in development.

All in all, I’m not entirely convinced that this solves the main problem. Developers want full disk access because they’d like to take advantage of things like iMessage, and there’s no better way to do it. As long as this demand exists, users will likely have to allow full disk access and risk all kinds of other data just to share their texts with an agent.

Granted, the pdf also mentions the idea of private folders, which could potentially allow users to grant limited access to just the iMessage database. It’s unclear if this will be possible, as there are few details on how private folders will work. If that’s the case, then hopefully Full Disk Access will stop being the default permission you need to grant for any personal data.

My favorite Apple accessory recommendations:

Follow Michael: X/Twitter, Blues, Instagram