macOS 27.3 is expected to change how apps, including AI agents, gain access to protected data on Apple computers. Apple said last month that it would tighten privacy controls in a future macOS release, after concerns that AI agents were asking for Full Disk Access and then handling personal data without users fully understanding what was happening.
What Apple has said about Full Disk Access
In its announcement, Apple said apps will need “very explicit user action” to receive Full Disk Access on a Mac. Full Disk Access is a macOS permission that lets an app read protected areas of the system and user data, such as the Messages database that stores iMessage conversations. At the time, Apple did not explain what the new requirement would look like in practice.
Details began to emerge on November 7, 2026, when the leaker known as pdfu posted on X about the changes. According to pdfu, Apple is removing a workaround that developers have used to make it easier for users to enable the permission. Apple has not published the new behavior in detail, so these details come from the leak.
How the current permission prompt works
In current versions of macOS, when an app requests a file that requires Full Disk Access, the system denies the request. It also adds the app to the list in the Settings app where users can enable Full Disk Access. Developers often use that moment to show a prompt that asks users to open the Settings section and flip the toggle for the app.
That listing is the step pdfu says is going away. The leaker says that starting with macOS 27.3, apps that request files outside their permission scope will no longer be logged. As a result, those apps will not appear as options to toggle on in the Full Disk Access list.
Limits of the change and open questions
pdfu also shared a code-level view of a feature flag tied to the change. Even with that flag enabled, developers can still ask users to drag an app icon into the Settings panel to grant Full Disk Access. pdfu’s view is that this still does not clearly amount to “very explicit user action,” though it may change as development continues. The changes are described as still in development, so the final behavior could differ.
The broader problem may also remain. Developers request Full Disk Access because they want to work with data such as iMessage, and no simpler method has replaced it. If that demand continues, users may still need to grant the broad permission to let an agent read their messages, which exposes other personal data on the same disk.
What could change for users and developers
pdfu also mentioned Private Folders, a possible alternative that could allow narrower access, such as granting an app access only to the iMessage database folder. The leaker did not say whether Private Folders will work that way, and there is little detail on how the feature would operate. If scoped access becomes available, it could reduce the need to hand over Full Disk Access for personal data.
For now, the main confirmed point is Apple’s commitment to “very explicit user action” for Full Disk Access. Whether macOS 27.3 delivers that depends on the final version of the feature, and Apple has not yet given a release date for the update.