The macOS Golden Gate 27.3 beta includes a Full Disk Access flag that stops apps from adding themselves to the permission list, but Apple has it turned off in the first beta. Once the flag is on, you would have to add an app yourself with the plus button or by dragging it in from the Applications folder.
Until now, macOS has denied an app without a prompt when it reads a protected file without Full Disk Access, and it records the denial in the Transparency, Consent, and Control (TCC) database. That record puts the app in the list under Privacy & Security with its switch off, and many apps then tell you to open System Settings and flip it. The flag may be the first visible piece of the controls Apple promised on October 2.
The Full Disk Access flag stops saving automatic denials
pdfu found the flag, named TCC/FDA_WARNING, in the beta and posted the details on X. When the flag is on, macOS no longer saves the automatic denial, so an app that is blocked from a protected file never shows up in the list on its own.
You would have to click the plus button in the Full Disk Access pane or drag the app in from the Applications folder. That includes AI agent apps such as Meta’s Muse for Mac, where you choose in macOS Settings whether the app gets Full Disk Access.
The flag is switched off in the first macOS Golden Gate 27.3 beta, and it does not add any warning or dialog yet. Apple has not said whether the final release will turn it on.
macOS 27.3 starts implementing changes to Full Disk Access (FDA). Here’s what ‘very explicit user action’ may mean. When an app tries to read a protected file without FDA, macOS doesn’t prompt the user to grant permission. Instead, it automatically denies access and records that denial in the TCC database. Once in the db, apps show up under Settings > Privacy & Security > Full Disk Access with their toggle off. Apps will often add themselves to the list, then instruct the user to open Settings and flip the toggle. Not anymore: starting with macOS 27.3 and feature flag TCC/FDA_WARNING, automatic denials are no longer saved. Users will have to explicitly add an app to the list with the + button or by dragging it in from Applications. So far, the flag doesn’t add any additional warnings or dialogs, but its name suggests these may arrive in future betas. The flag is disabled in 27.3 beta 1. —— Relatedly, macOS 27.3 introduces “Private Folders,” a new folder-by-folder permission configured like Full Disk Access. Not fully wired up yet, but it could offer a narrower alternative to Full Disk Access. It’s also impacted by TCC/FDA_WARNING: when the flag is on, automatic Private Folders denials aren’t saved either.
— pdfu (@itspdfu) November 7, 2026
Private Folders is a new folder-by-folder permission
macOS Golden Gate 27.3 also introduces Private Folders, a permission you set folder by folder in the same way as Full Disk Access. Private Folders is not fully wired up in the first beta. pdfu says it could become a narrower alternative to Full Disk Access, giving an app one folder instead of the whole Mac.
The flag covers Private Folders too. With TCC/FDA_WARNING on, automatic Private Folders denials are not saved either.
The change follows Apple’s October 2 warning about AI agents
Apple said on October 2 that Full Disk Access largely sidesteps the privacy controls on the Mac so that backup apps can work. The company added that some developers use it to expose files, mail, messages and browsing history without users understanding, and that the risk grows as AI agents become more autonomous. In Apple’s words, granting the access should take “very explicit user action.”
You can review which apps have Full Disk Access in System Settings under Privacy & Security today. macOS Golden Gate 27.3 is expected in December, and everything here is beta behavior, so the flag and the Private Folders setting can change before the release.
