Is it possible to support interception of listing directory functionality?

[wzxinchen]

I don't know how to succinctly describe this feature, so I didn't search ahead.

I want to make a free WebIDE for end users (non-enterprise) based on OpenVscode.

This will involve permission issues. How to isolate the code of different users from each other?

Currently I have an idea of running a container for each user, so that they are naturally isolated.

But this is too expensive for hardware, after all, if I have a hundred users online at the same time, I have to run a hundred containers.

So I thought of another way to always run only one container, and the code of all users is stored inside the container, divided by folders.

This will face another problem, VSCode allows any user to open any folder, so how to safely isolate user data becomes a problem.

What I can think of is to intercept the process of listing directories of VSCode, and only list the directories that the current user is allowed to view.