🔒 Preserve encrypted asset access restrictions #18034

Author: 88250

kernel/api/asset.go

@@ -478,13 +478,19 @@ func resolveAssetPath(c *gin.Context) {
 	}
 
 	path := arg["path"].(string)
-	p, err := model.PrepareAssetForOpen(path)
+	p, err := model.GetAssetAbsPathInBox(path, "")
 	if err != nil {
 		ret.Code = -1
 		ret.Msg = err.Error()
 		ret.Data = map[string]any{"closeTimeout": 3000}
 		return
 	}
+	if model.IsEncryptedAssetPath(p) {
+		ret.Code = -1
+		ret.Msg = model.Conf.Language(314)
+		ret.Data = map[string]any{"closeTimeout": 3000}
+		return
+	}
 	ret.Data = p
 	return
 }

kernel/api/clipboard.go

@@ -72,14 +72,20 @@ func writeFilePath(c *gin.Context) {
 		return
 	}
 
-	absPath, err := model.PrepareAssetForOpen(pathArg)
+	absPath, err := model.GetAssetAbsPathInBox(pathArg, "")
 	if err != nil {
 		logging.LogErrorf("get asset [%s] abs path failed: %s", pathArg, err)
 		ret.Code = -1
 		ret.Msg = err.Error()
 		ret.Data = map[string]any{"closeTimeout": 5000}
 		return
 	}
+	if model.IsEncryptedAssetPath(absPath) {
+		ret.Code = -1
+		ret.Msg = model.Conf.Language(314)
+		ret.Data = map[string]any{"closeTimeout": 5000}
+		return
+	}
 
 	if err = util.WriteFilePaths([]string{absPath}); err != nil {
 		logging.LogErrorf("write file path to clipboard failed: %s", err)