diff --git a/.github/workflows/codex-pr-review.yml b/.github/workflows/codex-pr-review.yml
index 7eba044..601015d 100644
--- a/.github/workflows/codex-pr-review.yml
+++ b/.github/workflows/codex-pr-review.yml
@@ -62,6 +62,7 @@ jobs:
           sandbox: read-only
           safety-strategy: drop-sudo
           prompt-file: .github/prompts/codex-pr-review.md
+          allow-users: "*"
 
       - name: Validate Codex output
         shell: bash