macOS 27.3 to Require Explicit User Actions for AI Apps’ Full Disk Access
Apple is set to enhance privacy controls in macOS 27.3, requiring more explicit user actions for applications to obtain Full Disk Access. This decision follows concerns about AI agents misusing user data without adequate awareness.
In a recent blog post, Apple stated that apps will need to secure “very explicit user action” to gain Full Disk Access on Macs. However, details on what this entails were initially unclear.
According to code sifter pdfu, Apple plans to eliminate a loophole that allowed developers to simplify the process for users to enable Full Disk Access. Currently, when an app requests access to files requiring Full Disk Access, the system denies the request but logs the app as an option in the Settings app.
This logging allows developers to prompt users to enable Full Disk Access easily. However, starting with macOS 27.3, apps that request files outside their permission scope will no longer be logged, meaning they won’t appear as options for toggling Full Disk Access.
When an app attempts to access a protected file without Full Disk Access, macOS will automatically deny permission without prompting the user, according to pdfu.
Developer Concerns
Currently, developers can still ask users to drag an app icon to the Settings panel to enable Full Disk Access, even with the new feature flag enabled. Some believe this process may not fully align with the idea of requiring “very explicit user action” to grant access.
Despite these changes, concerns remain about whether this approach effectively addresses the core issue. Developers often seek Full Disk Access to interact with features like iMessage, and users may still need to grant this access, risking exposure of other data.
pdfu also mentioned the potential introduction of Private Folders, which could allow users to grant limited access to specific folders, such as the iMessage database. However, details on how Private Folders would function remain scarce.
Source: 9to5Mac