I’m trying Claude Code on a project where reading files is routine, but running shell commands or changing files should require a closer look. Is there a practical way to set different approval rules by tool, rather than approving everything or allowing everything?

If you’ve configured this for a team, I’d be interested in how you keep the permissions useful without making normal work feel like a constant stream of prompts.