add protected room mount type.

OpenApi.yml

@@ -320,7 +320,7 @@ components:
       properties:
         type:
           type: string
-          enum: [ private, template, public ]
+          enum: [ private, template, protected, public ]
           example: private
         host_path:
           type: string

client/src/api/api.ts

@@ -337,6 +337,7 @@ export interface RoomMount {
 export enum RoomMountTypeEnum {
     private = 'private',
     template = 'template',
+    protected = 'protected',
     public = 'public'
 }
 

client/src/components/RoomsCreate.vue

@@ -273,7 +273,8 @@
           <v-row align="center" no-gutters v-if="data.mounts.length > 0">
             <p>
               <strong>Private</strong>: Host path is relative to <code class="mx-1">&lt;storage path&gt;/rooms/&lt;room name&gt;/</code>. <br />
-              <strong>Template</strong>: Host path is relative to <code class="mx-1">&lt;storage path&gt;/templates/</code> and is readonly. <br />
+              <strong>Template</strong>: Host path is relative to <code class="mx-1">&lt;storage path&gt;/templates/</code>, and will be readonly. <br />
+              <strong>Protected</strong>: Host path must be whitelisted in config and exists on the host, will be readonly. <br />
               <strong>Public</strong>: Host path must be whitelisted in config and exists on the host.
             </p>
           </v-row>
@@ -503,6 +504,10 @@ export default class RoomsCreate extends Vue {
         text: 'Template',
         value: 'template',
       },
+      {
+        text: 'Protected',
+        value: 'protected',
+      },
       {
         text: 'Public',
         value: 'public',

internal/room/manager.go

@@ -336,7 +336,10 @@ func (manager *RoomManagerCtx) Create(settings types.RoomSettings) (string, erro
 
 			// prefix host path
 			hostPath = path.Join(manager.config.StorageExternal, templateStoragePath, hostPath)
-		} else if mount.Type == types.MountPublic {
+		} else if mount.Type == types.MountProtected || mount.Type == types.MountPublic {
+			// readonly if mount type is protected
+			readOnly = mount.Type == types.MountProtected
+
 			// public whitelisted mounts
 			var isAllowed = false
 			for _, path := range manager.config.MountsWhitelist {

internal/types/room.go

@@ -44,9 +44,10 @@ type RoomEntry struct {
 type MountType string
 
 const (
-	MountPrivate  MountType = "private"
+	MountPrivate   MountType = "private"
-	MountTemplate MountType = "template"
+	MountTemplate  MountType = "template"
-	MountPublic   MountType = "public"
+	MountProtected MountType = "protected"
+	MountPublic    MountType = "public"
 )
 
 type RoomMount struct {