In short, sandboxing is an idea where every app lives in an isolated environment. By default an application can only access its own files, every other system resource is unavailable until the user explicitly allows the app to use it. It has impact on many apps, for instance your favorite git client won't be allowed to open the repositories you've been lately working on, just because they're located in Documents.