Apple Could Make It Harder for AI Agents to Get Full Disk Access in macOS 27.3

Apple is preparing to tighten the rules governing disk access for artificial intelligence agents in a future macOS update. These agents are programs that perform various tasks on the user's behalf. Initial code changes indicate that the new rule could be introduced in macOS 27.3. The aim is to prevent agents from gaining broad access to personal data without the user fully understanding it and performing unwanted actions with that data. According to the company, users will have to take a more explicit and direct step to grant such permission.

In current versions of macOS, when an app tries to open a file it does not have permission to access, the system denies the request. However, the app is automatically added to the list of programs that can be granted full disk access. Developers also direct users to that section of the Settings app. By enabling the toggle, users grant “Full Disk Access,” meaning broad access to all files on the disk. This makes it much easier for apps to request this permission.

Starting with the macOS 27.3 update, apps that request access to files for which they do not have permission may no longer be added to that list automatically. In that case, users will not be able to find the app in Settings and immediately enable the toggle. In the current test version, full disk access can be granted by dragging the app's icon into the permissions panel. The change is still being developed and may work differently in the final version.

The issue particularly affects apps that want to share iMessage data with artificial intelligence agents. Because there is no separate, limited permission option, these programs often request access to the entire disk. This could put other personal files at risk. A potential “Private Folders” feature could grant access only to a selected folder, such as the iMessage database. However, it is not yet known how the feature will work or whether it will be ready for macOS 27.3.