Apple's promised tightening of Full Disk Access on the Mac may be starting to take shape in macOS 27.3, according to a report from 9to5Mac that draws on findings shared by a developer who goes by pdfu on X.
The background is a warning Apple issued last month. In a blog post, the company said that apps would need "very explicit user action" before gaining Full Disk Access, a response to AI agents that asked for the broad permission and then handled user data in ways people were not fully aware of. At the time, Apple did not spell out what that explicit action would look like.
Today, the system handles a blocked request in a convenient way for developers. When an app tries to read a protected file without the permission, macOS does not show a prompt. It quietly denies the request and records the app in the Full Disk Access list in System Settings. Developers then commonly point users to that pane and ask them to flip a toggle.
According to pdfu, that shortcut is going away. Starting as soon as macOS 27.3, apps that try to read files outside their permitted scope will reportedly no longer be logged, so they will not appear in the list as a ready-made toggle. 9to5Mac notes the change is still in development and the leaker's description has not been confirmed by Apple.
There is a catch, per the same report. Developers can still ask people to drag an app's icon into the Full Disk Access panel, even with the relevant feature flag switched on. 9to5Mac's Michael Burkhardt writes that this does not yet feel like "very explicit user action" and that Apple's approach may change before release.
The publication also questions whether the move solves the underlying problem. Many AI agent developers want Full Disk Access so their tools can reach data such as the Messages database, and there is currently no narrower way to grant that. Unless that demand is met another way, users may still have to hand over wide access just to share their texts with an agent.
Pdfu also mentioned the idea of "Private Folders," which could in theory let someone grant scoped access to a single location, such as the folder holding the iMessage database. Details on how that would work are thin, and it is unclear whether it will ship.
For now, none of this is official. Apple has not described the macOS 27.3 behavior in release notes, and the details come from a leaker's analysis of beta code, so they could shift before the update arrives.
0 comments