Block access to files/folders

[mchaliadzinau]

Is there a way to restrict access to some files or subfolders?

I'm using https://www.npmjs.com/package/obsidian-mcp-server which relies on your plugin to get access to the vault.
I do not want to create separate vault for sensitive data, so making some folder "disappear" would be great.

I imagine it may be useful for others as well.

[coddingtonbear]

It sounds like a useful idea! Unfortunately, features like this tend to be harder to get right than they might initially seem -- especially if we want to make meaningful security guarantees.

To unpack that a bit, you might imagine we could just limit access to certain /vault/ files, but there are a few complications:

• What about search results? Would we also need to filter results coming from Obsidian’s own search?
• What about commands? We don’t have visibility into what they do or which files they operate on.
• What about the /active/ and /periodic/ endpoints? Those could reference content anywhere in the vault.

There ends up being a fairly large surface area to cover, and I’d want to avoid presenting something as a security feature unless we can make strong, reliable guarantees about how it behaves.

[mchaliadzinau]

Makes sense, I've thought the same actually, there are so many things through which data may leak outside.

Still, there should be some workaround for this, the only one coming to my head is to try to encrypt such files but it also far from ideal.

Maybe you have any other ideas?

[coddingtonbear]

I run into a similar need for keeping my work and private notes separated and... what I've done is just have two separate vaults. Unfortunately, that's really all I can recommend offhand.