Allow permission profiles to extend multiple profiles
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 45/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- rust
- Domain
- authorization
Research direction
Start by reviewing the single-parent inheritance introduced in #22270 and its runtime application in #23705. Define merge order, conflict handling, recursive inheritance, cycle detection, and duplicate-parent behavior, then confirm that both scalar and array extends syntax work as specified.
Written by the indexing model from the issue text.
Description
What variant of Codex are you using?
app
What feature would you like to see?
Problem
Permission profiles currently support only one parent:
extends = "profile-a"
This limits reuse when a profile needs permissions from several independent profiles. Users must duplicate rules or create artificial inheritance chains.
Proposal
Allow extends to accept an array:
extends = ["profile-a", "profile-b"]
The existing scalar syntax should remain supported.
The implementation should define:
- merge order and conflict handling;
- recursive inheritance;
- cycle detection; and
- duplicate-parent behavior.
An alternative would be a separate composition field such as:
includes = ["profile-a", "profile-b"]
Related work
- #22270 introduced single-parent profile inheritance.
- #23705 applied inherited profiles at runtime.
- #13496 demonstrates additive permission composition internally for skills.
This would make permission profiles more modular and avoid maintaining separate profiles for every combination of permissions.
Additional information
No response
- Dominant language
- Rust
- Stars
- 125k
- Forks
- 19.5k
- Avg merge
- 1m
- Merged PRs (30d)
- 1k
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from openai/codex
-
enhancement remote
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
bug CLI windows-os
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
macOS sandbox blocks hw.optional.arm64 sysctl, causing Flutter to misdetect Apple Silicon as x64 Openbug CLI sandbox
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug CLI TUI
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
CLI config enhancement skills
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
kwakseongjae/auto-hwp#319 ·
-
area:cli bug filter-quality good first issue priority:medium
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
-
Difficulty 1/5 Under an hour Newbie friendliness 72/100
bevyengine/bevy#25861 ·
-
comp-datalake
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
ClickHouse/ClickHouse#121222 ·
-
A-linter
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
oxc-project/oxc#26863 ·