Synchronizing subfolder of encrypted folder causes download of all files

[sareph]

⚠️ Before submitting, please verify the following: ⚠️

• This is a bug, not a question or a configuration issue.
• This issue is not already reported on Github (I have searched for it).
• Nextcloud Server and Desktop Client are up to date. See Server Maintenance and Release Schedule and Desktop Releases for supported versions.
• I agree to follow Nextcloud's Code of Conduct

Bug description

When You want to sync only one sub folder of encrypted folder, desktop client will download all files and folders in that encrypted root folder.
To make matters worse, even if You let him do it and then disable sync on everything except the one sub folder You wanted - it will then show in the UI that all children of that encrypted folder are being synchronized even if in reality only one folder is present.

Steps to reproduce

1. Create folder then encrypt it (Let say "test")
2. Create some sub folders in this folder ("test\sub1", "test\sub2", "test\sub3")
3. Disable sync for encrypted root folder ("test")
4. Enable sync on "test\sub1"
5. Client will pull "test*" to the drive

Expected behavior

Synchronize only contents of "test\sub1" only

Which files are affected by this bug

Operating system

Windows

Which version of the operating system you are running.

Windows 11

Installation method

Official Windows MSI

Nextcloud Server version

33.0.5

Nextcloud Desktop Client version

33.0.5

Did this occur after an update or on a clean installation?

Minor version update (i.e. 33.0.0 → 33.0.1)

Are you using the Nextcloud Server Encryption module?

No

Are you using an external user-backend?

• Default internal user-backend
• LDAP or Active Directory
• SSO - SAML
• Other

Nextcloud Server logs

Additional info