对文件夹树，容器或附件列表的浏览不受权限控制

routes/api.php

@@ -55,6 +55,10 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
     Route::get("company-items", [API\CompanyController::class, "publicSearch"]);
     Route::get("department-items", [API\DepartmentController::class, "publicSearch"]);
     Route::get("container-linkage/{library_id}", [API\ContainerController::class, "linkage"]);
+    Route::get("folder-open", [API\FolderController::class, "open"]);
+    Route::get("folder-tree/{object_type}/{object_id}", [API\FolderController::class, "tree"]);
+    Route::get("file/{object_type}/{object_id}", [API\FileController::class, "byObject"]);
+    Route::get("folder/file-version-tree/{object_type}/{object_id}", [API\FolderController::class, "versionFileTreeByObject"]);
 
     // Allow access only to admin role
     Route::middleware(['permission', 'role.super-admin', 'system.operation-log'])->group(function () {
@@ -203,14 +207,14 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
         Route::delete("team-member/{team_member}", [API\TeamMemberController::class, "destroy"])->name("team-member.destroy");
         Route::post("team-member/{project}/manage", [API\TeamMemberController::class, "manageMembers"])->name("team-member.manage-members");
 
-        Route::get("folder-tree/{object_type}/{object_id}", [API\FolderController::class, "tree"])->name("folder.tree");
+
         Route::post("folder", [API\FolderController::class, "store"])->name("folder.store");
         Route::get("folder/{folder}", [API\FolderController::class, "show"])->name("folder.show");
         Route::patch("folder/{folder}", [API\FolderController::class, "update"])->name("folder.update");
         Route::delete("folder/{folder}", [API\FolderController::class, "destroy"])->name("folder.destroy");
-        Route::get("folder-open", [API\FolderController::class, "open"])->name("folder.open");
-        Route::get("folder/file-version-tree/{object_type}/{object_id}", [API\FolderController::class, "versionFileTreeByObject"])
-            ->name("folder.file-version-tree-by-object");
+//        Route::get("folder-open", [API\FolderController::class, "open"])->name("folder.open");
+//        Route::get("folder/file-version-tree/{object_type}/{object_id}", [API\FolderController::class, "versionFileTreeByObject"])
+//            ->name("folder.file-version-tree-by-object");
         Route::patch("folder/{folder}/change-name", [API\FolderController::class, "changeName"])->name("folder.change-name");
         Route::get("folder/search/folder-file", [API\FolderController::class, "search"])->name("folder.search-folder-file");
 
@@ -229,7 +233,7 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
         Route::patch("action/{action}/comment", [API\ActionController::class, "updateComment"])->name("action.update-comment");
 
         Route::post("file-upload", [API\FileController::class, "upload"])->name("file.upload");
-        Route::get("file/{object_type}/{object_id}", [API\FileController::class, "byObject"])->name("file.by-object");
+//        Route::get("file/{object_type}/{object_id}", [API\FileController::class, "byObject"])->name("file.by-object");
         Route::post("file/{file}/download", [API\FileController::class, "download"])->name("file.download");
         Route::post("file/download-zip", [API\FileController::class, "downloadZip"])->name("file.download-zip");
         Route::get("file/download-all-latest/{object_type}/{object_id}", [API\FileController::class, "downloadAllLatest"])