MacOS sandboxes user folders by default. The user need to explicitly give a permission for every application.

It sandboxes some use folders. ~/projects won’t be sandboxed for example.