fix: handle permission errors when browsing directories

2026-04-11 14:06:15 +08:00
parent 6ad885044b
commit 67c4394c2d
1 changed files with 11 additions and 1 deletions
@@ -66,8 +66,18 @@ def browse(path: str = ""):
        target = _safe_path(path)
    except ValueError:
        raise HTTPException(status_code=403, detail="Access denied")
+
+    # Check if we have permission to read the directory
+    try:
+        items = list(target.iterdir())
+    except PermissionError:
+        raise HTTPException(status_code=403, detail="Permission denied")
+    except OSError as e:
+        logger.error(f"Error reading directory {target}: {e}")
+        raise HTTPException(status_code=500, detail="Error reading directory")
+
    entries = []
-    for item in sorted(target.iterdir()):
+    for item in sorted(items):
        try:
            if not _is_safe_symlink(item):
                continue