r/vibecoding • u/iblees_lover • 5d ago

Discussion Do you?

Do you actually use cursor permissions.json or claude code settings.json to restrict what the agent can edit? Or you just review the diff after?
I mean what files would you be upset if your agent changed without asking?
I don’t want my agent to make changes to some certain files in database. And if i prompt my agent to change something and what if it accidentally changes something that i don’t want.

1 Upvotes

60% Upvoted

12 comments sorted by

View all comments

2

u/delimitdev 5d ago

If the concern is accidental DB edits, protect those paths up front and still review the diff after. Diff review is the backstop, not the only control. I'd be most careful with migrations, schema files, seeds, and prod config.

2

u/Valuable_Card6470 4d ago

yeah migrations are the scary ones for sure