throw new SmbException("Path is not allowed");
        }

        // Check against whitelist if configured
        if (!whitelistedPaths.isEmpty() && !isWhitelisted(normalized)) {
            log.warn("Path is not whitelisted: {}", sanitizeForLog(normalized));
            throw new SmbException("Path is not in allowed list");
        }

        // Validate UNC paths