Apply the reprint checks to re-slicing an archive with the built-in slicer.

backend/app/api/routes/archives.py

@@ -5014,6 +5014,11 @@ async def slice_archive(
     # (RequestActor); only auth off keeps can_read_all=True.
     can_read_all = actor is None or actor.has_permission(Permission.ARCHIVES_READ_ALL.value)
     archive = _ensure_archive_visible(archive, actor, can_read_all, printer_scope)
+    # The re-sliced copy belongs to the caller and can be queued as their own,
+    # so slicing an archive needs the same right as printing it again.
+    from backend.app.api.routes.print_queue import _assert_can_queue_archive
+
+    _assert_can_queue_archive(archive, actor, printer_scope)
 
     src_relative = archive.source_3mf_path or archive.file_path
     if not src_relative:

backend/tests/integration/test_queue_source_gate.py

@@ -296,3 +296,34 @@ async def test_running_a_pipeline_on_an_archive_needs_the_right_to_reprint_it(
     assert refused.status_code == 403, refused.text
     # Past the gate, the run stops at the archive file this test does not create.
     assert (passed_gate.status_code, passed_gate.json()["detail"]) == (404, "Archive source file missing on disk")
+
+
+async def test_slicing_an_archive_needs_the_right_to_reprint_it(
+    async_client: AsyncClient, printer_factory, archive_factory
+):
+    # The sliced copy belongs to whoever slices it and can be queued as their own.
+    printer = await printer_factory()
+    admin = await _admin_token(async_client)
+    archive = await archive_factory(printer.id)
+    base = ["printers:read", "queue:create", "archives:read_all", "library:upload"]
+    without = _auth(
+        (await _user(async_client, admin, "without", [await _group(async_client, admin, "g1", permissions=base)]))[0]
+    )
+    with_reprint = _auth(
+        (
+            await _user(
+                async_client,
+                admin,
+                "with",
+                [await _group(async_client, admin, "g2", permissions=[*base, "archives:reprint_all"])],
+            )
+        )[0]
+    )
+    body = {"printer_preset_id": 1, "process_preset_id": 2, "filament_preset_id": 3}
+
+    refused = await async_client.post(f"/api/v1/archives/{archive.id}/slice", headers=without, json=body)
+    passed_gate = await async_client.post(f"/api/v1/archives/{archive.id}/slice", headers=with_reprint, json=body)
+
+    assert refused.status_code == 403, refused.text
+    # Past the gate, the request stops at the archive file this test does not create.
+    assert (passed_gate.status_code, passed_gate.json()["detail"]) == (404, "Archive source file missing on disk")

frontend/src/pages/ArchivesPage.tsx

@@ -597,6 +597,12 @@ function ArchiveCard({
             openInSlicerWithToken(archive.id, filename, 'file', preferredSlicer);
           }
         },
+        // The sliced copy is printable as the user's own, so it needs the right to reprint.
+        disabled: useSlicerApi && !canModify('archives', 'reprint', archive.created_by_id),
+        title:
+          useSlicerApi && !canModify('archives', 'reprint', archive.created_by_id)
+            ? t('archives.permission.noReprint')
+            : undefined,
       },
       // Run-with-pipeline (#1425 PR B follow-up). Sources from archive's
       // source 3MF (or file_path fallback). Only when slicer-api is on.
@@ -1446,7 +1452,14 @@ function ArchiveCard({
                   openInSlicerWithToken(archive.id, filename, 'file', preferredSlicer);
                 }
               }}
-              title={useSlicerApi ? t('slice.title') : t('archives.card.openInBambuStudioToSlice')}
+              disabled={useSlicerApi && !canModify('archives', 'reprint', archive.created_by_id)}
+              title={
+                useSlicerApi
+                  ? canModify('archives', 'reprint', archive.created_by_id)
+                    ? t('slice.title')
+                    : t('archives.permission.noReprint')
+                  : t('archives.card.openInBambuStudioToSlice')
+              }
             >
               {useSlicerApi ? (
                 <Cog className="w-3 h-3 flex-shrink-0" />
@@ -2102,6 +2115,12 @@ function ArchiveListRow({
             openInSlicerWithToken(archive.id, filename, 'file', preferredSlicer);
           }
         },
+        // The sliced copy is printable as the user's own, so it needs the right to reprint.
+        disabled: useSlicerApi && !canModify('archives', 'reprint', archive.created_by_id),
+        title:
+          useSlicerApi && !canModify('archives', 'reprint', archive.created_by_id)
+            ? t('archives.permission.noReprint')
+            : undefined,
       },
       // Run-with-pipeline (#1425 PR B follow-up). Sources from archive's
       // source 3MF (or file_path fallback). Only when slicer-api is on.

static/assets/inventorySearch-DhdOL4y3.js → static/assets/inventorySearch-B2RXCD2R.js

@@ -1 +1 @@
-import{ft as e}from"./index-dx8-YkAB.js";function t(t,n){let r=n.trim().toLowerCase();if(!r)return!0;let i=r.match(/^#(\d+)$/);return i?t.id===Number(i[1]):String(t.id).includes(r)||t.material.toLowerCase().includes(r)||(t.brand?.toLowerCase().includes(r)??!1)||(t.color_name?.toLowerCase().includes(r)??!1)||(e(t.color_name,t.rgba,t.color_name_is_synthesized)?.toLowerCase().includes(r)??!1)||(t.subtype?.toLowerCase().includes(r)??!1)||(t.note?.toLowerCase().includes(r)??!1)||(t.slicer_filament_name?.toLowerCase().includes(r)??!1)||(t.storage_location?.toLowerCase().includes(r)??!1)||(t.material_number?.toLowerCase().includes(r)??!1)||(t.suppliers?.some(e=>e.supplier_name.toLowerCase().includes(r)||(e.supplier_article_number?.toLowerCase().includes(r)??!1))??!1)}function n(e,n){return n?e.filter(e=>t(e,n)):e}export{n as t};
+import{ft as e}from"./index-CELnCUsn.js";function t(t,n){let r=n.trim().toLowerCase();if(!r)return!0;let i=r.match(/^#(\d+)$/);return i?t.id===Number(i[1]):String(t.id).includes(r)||t.material.toLowerCase().includes(r)||(t.brand?.toLowerCase().includes(r)??!1)||(t.color_name?.toLowerCase().includes(r)??!1)||(e(t.color_name,t.rgba,t.color_name_is_synthesized)?.toLowerCase().includes(r)??!1)||(t.subtype?.toLowerCase().includes(r)??!1)||(t.note?.toLowerCase().includes(r)??!1)||(t.slicer_filament_name?.toLowerCase().includes(r)??!1)||(t.storage_location?.toLowerCase().includes(r)??!1)||(t.material_number?.toLowerCase().includes(r)??!1)||(t.suppliers?.some(e=>e.supplier_name.toLowerCase().includes(r)||(e.supplier_article_number?.toLowerCase().includes(r)??!1))??!1)}function n(e,n){return n?e.filter(e=>t(e,n)):e}export{n as t};

static/index.html

@@ -26,7 +26,7 @@
 
     <!-- Splash screens for iOS -->
     <link rel="apple-touch-startup-image" href="/img/android-chrome-512x512.png" />
-    <script type="module" crossorigin src="/assets/index-dx8-YkAB.js"></script>
+    <script type="module" crossorigin src="/assets/index-CELnCUsn.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/chunk-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/client-C3LdD0iY.js">
     <link rel="modulepreload" crossorigin href="/assets/QueryClientProvider-DzWmuIjj.js">