wip

The numchild attribute must be incremented/decremented manually
when we soft delete a document if we want it to remain accurate,
which is important to display the tree structure in the frontend.

CHANGELOG.md

@@ -8,14 +8,13 @@ and this project adheres to
 
 ## [Unreleased]
 
-## [2.3.0] - 2025-03-03
-
 ## Added
 
+- ✨(backend) limit link reach/role select options depending on ancestors #645
+- ✨(backend) add new "descendants" action to document API endpoint #645
+- ✨(backend) new "tree" action on document detail endpoint #645
+- ✨(backend) allow forcing page size within limits #645
 - 💄(frontend) add error pages #643
-- 🔒️ Manage unsafe attachments #663
-- ✨(frontend) Custom block quote with export #646
-- ✨(frontend) add open source section homepage #666
 
 ## Changed
 
@@ -26,9 +25,8 @@ and this project adheres to
 
 ## Fixed
 
-- 🐛(backend) allow any type of extensions for media download #671
 - ♻️(frontend) improve table pdf rendering
-
+- 🐛(backend) refactor to fix filtering on children and descendants views #645
 
 ## [2.2.0] - 2025-02-10
 
@@ -416,8 +414,7 @@ and this project adheres to
 - ✨(frontend) Coming Soon page (#67)
 - 🚀 Impress, project to manage your documents easily and collaboratively.
 
-[unreleased]: https://github.com/numerique-gouv/impress/compare/v2.3.0...main
-[v2.3.0]: https://github.com/numerique-gouv/impress/releases/v2.3.0
+[unreleased]: https://github.com/numerique-gouv/impress/compare/v2.2.0...main
 [v2.2.0]: https://github.com/numerique-gouv/impress/releases/v2.2.0
 [v2.1.0]: https://github.com/numerique-gouv/impress/releases/v2.1.0
 [v2.0.1]: https://github.com/numerique-gouv/impress/releases/v2.0.1

docker/files/etc/nginx/conf.d/default.conf

@@ -68,8 +68,6 @@ server {
         # Get resource from Minio
         proxy_pass http://minio:9000/impress-media-storage/;
         proxy_set_header Host minio:9000;
-
-        add_header Content-Security-Policy "default-src 'none'" always;
     }
 
     location /media-auth {

src/backend/core/api/filters.py

@@ -12,15 +12,26 @@ class DocumentFilter(django_filters.FilterSet):
     Custom filter for filtering documents.
     """
 
+    title = django_filters.CharFilter(
+        field_name="title", lookup_expr="icontains", label=_("Title")
+    )
+
+    class Meta:
+        model = models.Document
+        fields = ["title"]
+
+
+class ListDocumentFilter(DocumentFilter):
+    """
+    Custom filter for filtering documents.
+    """
+
     is_creator_me = django_filters.BooleanFilter(
         method="filter_is_creator_me", label=_("Creator is me")
     )
     is_favorite = django_filters.BooleanFilter(
         method="filter_is_favorite", label=_("Favorite")
     )
-    title = django_filters.CharFilter(
-        field_name="title", lookup_expr="icontains", label=_("Title")
-    )
 
     class Meta:
         model = models.Document

src/backend/core/api/serializers.py

@@ -128,26 +128,14 @@ class TemplateAccessSerializer(BaseAccessSerializer):
         read_only_fields = ["id", "abilities"]
 
 
-class BaseResourceSerializer(serializers.ModelSerializer):
-    """Serialize documents."""
-
-    abilities = serializers.SerializerMethodField(read_only=True)
-    accesses = TemplateAccessSerializer(many=True, read_only=True)
-
-    def get_abilities(self, document) -> dict:
-        """Return abilities of the logged-in user on the instance."""
-        request = self.context.get("request")
-        if request:
-            return document.get_abilities(request.user)
-        return {}
-
-
-class ListDocumentSerializer(BaseResourceSerializer):
+class ListDocumentSerializer(serializers.ModelSerializer):
     """Serialize documents with limited fields for display in lists."""
 
     is_favorite = serializers.BooleanField(read_only=True)
-    nb_accesses = serializers.IntegerField(read_only=True)
+    nb_accesses_ancestors = serializers.IntegerField(read_only=True)
+    nb_accesses_direct = serializers.IntegerField(read_only=True)
     user_roles = serializers.SerializerMethodField(read_only=True)
+    abilities = serializers.SerializerMethodField(read_only=True)
 
     class Meta:
         model = models.Document
@@ -161,7 +149,8 @@ class ListDocumentSerializer(BaseResourceSerializer):
             "is_favorite",
             "link_role",
             "link_reach",
-            "nb_accesses",
+            "nb_accesses_ancestors",
+            "nb_accesses_direct",
             "numchild",
             "path",
             "title",
@@ -178,13 +167,30 @@ class ListDocumentSerializer(BaseResourceSerializer):
             "is_favorite",
             "link_role",
             "link_reach",
-            "nb_accesses",
+            "nb_accesses_ancestors",
+            "nb_accesses_direct",
             "numchild",
             "path",
             "updated_at",
             "user_roles",
         ]
 
+    def get_abilities(self, document) -> dict:
+        """Return abilities of the logged-in user on the instance."""
+        request = self.context.get("request")
+
+        if request:
+            paths_links_mapping = self.context.get("paths_links_mapping", None)
+            # Retrieve ancestor links from paths_links_mapping (if provided)
+            ancestors_links = (
+                paths_links_mapping.get(document.path[: -document.steplen])
+                if paths_links_mapping
+                else None
+            )
+            return document.get_abilities(request.user, ancestors_links=ancestors_links)
+
+        return {}
+
     def get_user_roles(self, document):
         """
         Return roles of the logged-in user for the current document,
@@ -214,7 +220,8 @@ class DocumentSerializer(ListDocumentSerializer):
             "is_favorite",
             "link_role",
             "link_reach",
-            "nb_accesses",
+            "nb_accesses_ancestors",
+            "nb_accesses_direct",
             "numchild",
             "path",
             "title",
@@ -230,7 +237,8 @@ class DocumentSerializer(ListDocumentSerializer):
             "is_favorite",
             "link_role",
             "link_reach",
-            "nb_accesses",
+            "nb_accesses_ancestors",
+            "nb_accesses_direct",
             "numchild",
             "path",
             "updated_at",
@@ -359,7 +367,7 @@ class ServerCreateDocumentSerializer(serializers.Serializer):
         raise NotImplementedError("Update is not supported for this serializer.")
 
 
-class LinkDocumentSerializer(BaseResourceSerializer):
+class LinkDocumentSerializer(serializers.ModelSerializer):
     """
     Serialize link configuration for documents.
     We expose it separately from document in order to simplify and secure access control.
@@ -418,7 +426,6 @@ class FileUploadSerializer(serializers.Serializer):
 
         self.context["expected_extension"] = extension
         self.context["content_type"] = magic_mime_type
-        self.context["file_name"] = file.name
 
         return file
 
@@ -427,13 +434,15 @@ class FileUploadSerializer(serializers.Serializer):
         attrs["expected_extension"] = self.context["expected_extension"]
         attrs["is_unsafe"] = self.context["is_unsafe"]
         attrs["content_type"] = self.context["content_type"]
-        attrs["file_name"] = self.context["file_name"]
         return attrs
 
 
-class TemplateSerializer(BaseResourceSerializer):
+class TemplateSerializer(serializers.ModelSerializer):
     """Serialize templates."""
 
+    abilities = serializers.SerializerMethodField(read_only=True)
+    accesses = TemplateAccessSerializer(many=True, read_only=True)
+
     class Meta:
         model = models.Template
         fields = [
@@ -447,6 +456,13 @@ class TemplateSerializer(BaseResourceSerializer):
         ]
         read_only_fields = ["id", "accesses", "abilities"]
 
+    def get_abilities(self, document) -> dict:
+        """Return abilities of the logged-in user on the instance."""
+        request = self.context.get("request")
+        if request:
+            return document.get_abilities(request.user)
+        return {}
+
 
 # pylint: disable=abstract-method
 class DocumentGenerationSerializer(serializers.Serializer):

src/backend/core/api/utils.py

@@ -11,6 +11,35 @@ import botocore
 from rest_framework.throttling import BaseThrottle
 
 
+def nest_tree(flat_list, steplen):
+    """
+    Convert a flat list of serialized documents into a nested tree making advantage
+    of the`path` field and its step length.
+    """
+    node_dict = {}
+    roots = []
+
+    # Sort the flat list by path to ensure parent nodes are processed first
+    flat_list.sort(key=lambda x: x["path"])
+
+    for node in flat_list:
+        node["children"] = []  # Initialize children list
+        node_dict[node["path"]] = node
+
+        # Determine parent path
+        parent_path = node["path"][:-steplen]
+
+        if parent_path in node_dict:
+            node_dict[parent_path]["children"].append(node)
+        else:
+            roots.append(node)  # Collect root nodes
+
+    if len(roots) > 1:
+        raise ValueError("More than one root element detected.")
+
+    return roots[0] if roots else None
+
+
 def filter_root_paths(paths, skip_sorting=False):
     """
     Filters root paths from a list of paths representing a tree structure.

src/backend/core/api/viewsets.py

@@ -20,7 +20,6 @@ from django.http import Http404
 
 import rest_framework as drf
 from botocore.exceptions import ClientError
-from django_filters import rest_framework as drf_filters
 from rest_framework import filters, status, viewsets
 from rest_framework import response as drf_response
 from rest_framework.permissions import AllowAny
@@ -30,7 +29,7 @@ from core.services.ai_services import AIService
 from core.services.collaboration_services import CollaborationService
 
 from . import permissions, serializers, utils
-from .filters import DocumentFilter
+from .filters import DocumentFilter, ListDocumentFilter
 
 logger = logging.getLogger(__name__)
 
@@ -38,10 +37,10 @@ ATTACHMENTS_FOLDER = "attachments"
 UUID_REGEX = (
     r"[a-fA-F0-9]{8}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{4}-[a-fA-F0-9]{12}"
 )
-FILE_EXT_REGEX = r"\.[a-zA-Z0-9]{1,10}"
+FILE_EXT_REGEX = r"\.[a-zA-Z]{3,4}"
 MEDIA_STORAGE_URL_PATTERN = re.compile(
     f"{settings.MEDIA_URL:s}(?P<pk>{UUID_REGEX:s})/"
-    f"(?P<key>{ATTACHMENTS_FOLDER:s}/{UUID_REGEX:s}(?:-unsafe)?{FILE_EXT_REGEX:s})$"
+    f"(?P<key>{ATTACHMENTS_FOLDER:s}/{UUID_REGEX:s}{FILE_EXT_REGEX:s})$"
 )
 COLLABORATION_WS_URL_PATTERN = re.compile(rf"(?:^|&)room=(?P<pk>{UUID_REGEX})(?:&|$)")
 
@@ -315,7 +314,6 @@ class DocumentViewSet(
     SerializerPerActionMixin,
     drf.mixins.CreateModelMixin,
     drf.mixins.DestroyModelMixin,
-    drf.mixins.ListModelMixin,
     drf.mixins.UpdateModelMixin,
     viewsets.GenericViewSet,
 ):
@@ -413,20 +411,21 @@ class DocumentViewSet(
     - Implements soft delete logic to retain document tree structures.
     """
 
-    filter_backends = [drf_filters.DjangoFilterBackend]
-    filterset_class = DocumentFilter
     metadata_class = DocumentMetadata
     ordering = ["-updated_at"]
     ordering_fields = ["created_at", "updated_at", "title"]
+    pagination_class = Pagination
     permission_classes = [
         permissions.DocumentAccessPermission,
     ]
     queryset = models.Document.objects.all()
     serializer_class = serializers.DocumentSerializer
+    ai_translate_serializer_class = serializers.AITranslateSerializer
+    children_serializer_class = serializers.ListDocumentSerializer
+    descendants_serializer_class = serializers.ListDocumentSerializer
     list_serializer_class = serializers.ListDocumentSerializer
     trashbin_serializer_class = serializers.ListDocumentSerializer
-    children_serializer_class = serializers.ListDocumentSerializer
-    ai_translate_serializer_class = serializers.AITranslateSerializer
+    tree_serializer_class = serializers.ListDocumentSerializer
 
     def annotate_is_favorite(self, queryset):
         """
@@ -499,8 +498,38 @@ class DocumentViewSet(
         )
 
     def filter_queryset(self, queryset):
-        """Apply annotations and filters sequentially."""
-        filterset = DocumentFilter(
+        """Override to apply annotations to generic views."""
+        queryset = super().filter_queryset(queryset)
+        queryset = self.annotate_is_favorite(queryset)
+        queryset = self.annotate_user_roles(queryset)
+        return queryset
+
+    def get_response_for_queryset(self, queryset):
+        """Return paginated response for the queryset if requested."""
+        page = self.paginate_queryset(queryset)
+        if page is not None:
+            serializer = self.get_serializer(page, many=True)
+            return self.get_paginated_response(serializer.data)
+
+        serializer = self.get_serializer(queryset, many=True)
+        return drf.response.Response(serializer.data)
+
+    def list(self, request, *args, **kwargs):
+        """
+        Returns a DRF response containing the filtered, annotated and ordered document list.
+
+        This method applies filtering based on request parameters using `ListDocumentFilter`.
+        It performs early filtering on model fields, annotates user roles, and removes
+        descendant documents to keep only the highest ancestors readable by the current user.
+
+        Additional annotations (e.g., `is_highest_ancestor_for_user`, favorite status) are
+        applied before ordering and returning the response.
+        """
+        queryset = (
+            self.get_queryset()
+        )  # Not calling filter_queryset. We do our own cooking.
+
+        filterset = ListDocumentFilter(
             self.request.GET, queryset=queryset, request=self.request
         )
         filterset.is_valid()
@@ -512,22 +541,19 @@ class DocumentViewSet(
 
         queryset = self.annotate_user_roles(queryset)
 
-        if self.action == "list":
-            # Among the results, we may have documents that are ancestors/descendants
-            # of each other. In this case we want to keep only the highest ancestors.
-            root_paths = utils.filter_root_paths(
-                queryset.order_by("path").values_list("path", flat=True),
-                skip_sorting=True,
-            )
-            queryset = queryset.filter(path__in=root_paths)
+        # Among the results, we may have documents that are ancestors/descendants
+        # of each other. In this case we want to keep only the highest ancestors.
+        root_paths = utils.filter_root_paths(
+            queryset.order_by("path").values_list("path", flat=True),
+            skip_sorting=True,
+        )
+        queryset = queryset.filter(path__in=root_paths)
 
-            # Annotate the queryset with an attribute marking instances as highest ancestor
-            # in order to save some time while computing abilities in the instance
-            queryset = queryset.annotate(
-                is_highest_ancestor_for_user=db.Value(
-                    True, output_field=db.BooleanField()
-                )
-            )
+        # Annotate the queryset with an attribute marking instances as highest ancestor
+        # in order to save some time while computing abilities on the instance
+        queryset = queryset.annotate(
+            is_highest_ancestor_for_user=db.Value(True, output_field=db.BooleanField())
+        )
 
         # Annotate favorite status and filter if applicable as late as possible
         queryset = self.annotate_is_favorite(queryset)
@@ -536,18 +562,11 @@ class DocumentViewSet(
         )
 
         # Apply ordering only now that everyting is filtered and annotated
-        return filters.OrderingFilter().filter_queryset(self.request, queryset, self)
+        queryset = filters.OrderingFilter().filter_queryset(
+            self.request, queryset, self
+        )
 
-    def get_response_for_queryset(self, queryset):
-        """Return paginated response for the queryset if requested."""
-        page = self.paginate_queryset(queryset)
-        if page is not None:
-            serializer = self.get_serializer(page, many=True)
-            result = self.get_paginated_response(serializer.data)
-            return result
-
-        serializer = self.get_serializer(queryset, many=True)
-        return drf.response.Response(serializer.data)
+        return self.get_response_for_queryset(queryset)
 
     def retrieve(self, request, *args, **kwargs):
         """
@@ -600,7 +619,7 @@ class DocumentViewSet(
             user=user
         ).values_list("document_id", flat=True)
 
-        queryset = self.get_queryset()
+        queryset = self.filter_queryset(self.get_queryset())
         queryset = queryset.filter(id__in=favorite_documents_ids)
         return self.get_response_for_queryset(queryset)
 
@@ -727,7 +746,6 @@ class DocumentViewSet(
         detail=True,
         methods=["get", "post"],
         ordering=["path"],
-        url_path="children",
     )
     def children(self, request, *args, **kwargs):
         """Handle listing and creating children of a document"""
@@ -759,12 +777,102 @@ class DocumentViewSet(
             )
 
         # GET: List children
-        queryset = document.get_children().filter(deleted_at__isnull=True)
+        queryset = document.get_children().filter(ancestors_deleted_at__isnull=True)
         queryset = self.filter_queryset(queryset)
-        queryset = self.annotate_is_favorite(queryset)
-        queryset = self.annotate_user_roles(queryset)
+
+        filterset = DocumentFilter(request.GET, queryset=queryset)
+        if filterset.is_valid():
+            queryset = filterset.qs
+
         return self.get_response_for_queryset(queryset)
 
+    @drf.decorators.action(
+        detail=True,
+        methods=["get"],
+        ordering=["path"],
+    )
+    def descendants(self, request, *args, **kwargs):
+        """Handle listing descendants of a document"""
+        document = self.get_object()
+
+        queryset = document.get_descendants().filter(ancestors_deleted_at__isnull=True)
+        queryset = self.filter_queryset(queryset)
+
+        filterset = DocumentFilter(request.GET, queryset=queryset)
+        if filterset.is_valid():
+            queryset = filterset.qs
+
+        return self.get_response_for_queryset(queryset)
+
+    @drf.decorators.action(
+        detail=True,
+        methods=["get"],
+        ordering=["path"],
+    )
+    def tree(self, request, pk, *args, **kwargs):
+        """
+        List ancestors tree above the document.
+        What we need to display is the tree structure opened for the current document.
+        """
+        try:
+            current_document = self.queryset.only("depth", "path").get(pk=pk)
+        except models.Document.DoesNotExist as excpt:
+            raise drf.exceptions.NotFound from excpt
+
+        ancestors = (
+            (current_document.get_ancestors() | self.queryset.filter(pk=pk))
+            .filter(ancestors_deleted_at__isnull=True)
+            .order_by("path")
+        )
+
+        # Get the highest readable ancestor
+        highest_readable = ancestors.readable_per_se(request.user).only("depth").first()
+        if highest_readable is None:
+            raise (
+                drf.exceptions.PermissionDenied()
+                if request.user.is_authenticated
+                else drf.exceptions.NotAuthenticated()
+            )
+
+        paths_links_mapping = {}
+        ancestors_links = []
+        children_clause = db.Q()
+        for ancestor in ancestors:
+            if ancestor.depth < highest_readable.depth:
+                continue
+
+            children_clause |= db.Q(
+                path__startswith=ancestor.path, depth=ancestor.depth + 1
+            )
+
+            # Compute cache for ancestors links to avoid many queries while computing
+            # abilties for his documents in the tree!
+            ancestors_links.append(
+                {"link_reach": ancestor.link_reach, "link_role": ancestor.link_role}
+            )
+            paths_links_mapping[ancestor.path] = ancestors_links.copy()
+
+        children = self.queryset.filter(children_clause, deleted_at__isnull=True)
+
+        queryset = ancestors.filter(depth__gte=highest_readable.depth) | children
+        queryset = queryset.order_by("path")
+        queryset = self.annotate_user_roles(queryset)
+        queryset = self.annotate_is_favorite(queryset)
+
+        # Pass ancestors' links definitions to the serializer as a context variable
+        # in order to allow saving time while computing abilities on the instance
+        serializer = self.get_serializer(
+            queryset,
+            many=True,
+            context={
+                "request": request,
+                "paths_links_mapping": paths_links_mapping,
+            },
+        )
+        return drf.response.Response(
+            utils.nest_tree(serializer.data, self.queryset.model.steplen)
+        )
+
     @drf.decorators.action(detail=True, methods=["get"], url_path="versions")
     def versions_list(self, request, *args, **kwargs):
         """
@@ -915,31 +1023,15 @@ class DocumentViewSet(
         # Generate a generic yet unique filename to store the image in object storage
         file_id = uuid.uuid4()
         extension = serializer.validated_data["expected_extension"]
+        key = f"{document.key_base}/{ATTACHMENTS_FOLDER:s}/{file_id!s}.{extension:s}"
 
         # Prepare metadata for storage
         extra_args = {
             "Metadata": {"owner": str(request.user.id)},
             "ContentType": serializer.validated_data["content_type"],
         }
-        file_unsafe = ""
         if serializer.validated_data["is_unsafe"]:
             extra_args["Metadata"]["is_unsafe"] = "true"
-            file_unsafe = "-unsafe"
-
-        key = f"{document.key_base}/{ATTACHMENTS_FOLDER:s}/{file_id!s}{file_unsafe}.{extension:s}"
-
-        file_name = serializer.validated_data["file_name"]
-        if (
-            not serializer.validated_data["content_type"].startswith("image/")
-            or serializer.validated_data["is_unsafe"]
-        ):
-            extra_args.update(
-                {"ContentDisposition": f'attachment; filename="{file_name:s}"'}
-            )
-        else:
-            extra_args.update(
-                {"ContentDisposition": f'inline; filename="{file_name:s}"'}
-            )
 
         file = serializer.validated_data["file"]
         default_storage.connection.meta.client.upload_fileobj(

src/backend/core/models.py

@@ -6,6 +6,7 @@ Declare and configure the models for the impress core application
 import hashlib
 import smtplib
 import uuid
+from collections import defaultdict
 from datetime import timedelta
 from logging import getLogger
 
@@ -29,7 +30,7 @@ from django.utils.translation import gettext_lazy as _
 from botocore.exceptions import ClientError
 from rest_framework.exceptions import ValidationError
 from timezone_field import TimeZoneField
-from treebeard.mp_tree import MP_Node
+from treebeard.mp_tree import MP_Node, MP_NodeManager, MP_NodeQuerySet
 
 logger = getLogger(__name__)
 
@@ -80,6 +81,55 @@ class LinkReachChoices(models.TextChoices):
     )  # Any authenticated user can access the document
     PUBLIC = "public", _("Public")  # Even anonymous users can access the document
 
+    @classmethod
+    def get_select_options(cls, ancestors_links):
+        """
+        Determines the valid select options for link reach and link role depending on the
+        list of ancestors' link reach/role.
+
+        Args:
+            ancestors_links: List of dictionaries, each with 'link_reach' and 'link_role' keys
+                             representing the reach and role of ancestors links.
+
+        Returns:
+            Dictionary mapping possible reach levels to their corresponding possible roles.
+        """
+        # If no ancestors, return all options
+        if not ancestors_links:
+            return {reach: LinkRoleChoices.values for reach in cls.values}
+
+        # Initialize result with all possible reaches and role options as sets
+        result = {reach: set(LinkRoleChoices.values) for reach in cls.values}
+
+        # Group roles by reach level
+        reach_roles = defaultdict(set)
+        for link in ancestors_links:
+            reach_roles[link["link_reach"]].add(link["link_role"])
+
+        # Apply constraints based on ancestor links
+        if LinkRoleChoices.EDITOR in reach_roles[cls.RESTRICTED]:
+            result[cls.RESTRICTED].discard(LinkRoleChoices.READER)
+
+        if LinkRoleChoices.EDITOR in reach_roles[cls.AUTHENTICATED]:
+            result[cls.AUTHENTICATED].discard(LinkRoleChoices.READER)
+            result.pop(cls.RESTRICTED, None)
+        elif LinkRoleChoices.READER in reach_roles[cls.AUTHENTICATED]:
+            result[cls.RESTRICTED].discard(LinkRoleChoices.READER)
+
+        if LinkRoleChoices.EDITOR in reach_roles[cls.PUBLIC]:
+            result[cls.PUBLIC].discard(LinkRoleChoices.READER)
+            result.pop(cls.AUTHENTICATED, None)
+            result.pop(cls.RESTRICTED, None)
+        elif LinkRoleChoices.READER in reach_roles[cls.PUBLIC]:
+            result[cls.AUTHENTICATED].discard(LinkRoleChoices.READER)
+            result.get(cls.RESTRICTED, set()).discard(LinkRoleChoices.READER)
+
+        # Convert roles sets to lists while maintaining the order from LinkRoleChoices
+        for reach, roles in result.items():
+            result[reach] = [role for role in LinkRoleChoices.values if role in roles]
+
+        return result
+
 
 class DuplicateEmailError(Exception):
     """Raised when an email is already associated with a pre-existing user."""
@@ -367,6 +417,51 @@ class BaseAccess(BaseModel):
         }
 
 
+class DocumentQuerySet(MP_NodeQuerySet):
+    """
+    Custom queryset for the Document model, providing additional methods
+    to filter documents based on user permissions.
+    """
+
+    def readable_per_se(self, user):
+        """
+        Filters the queryset to return documents that the given user has
+        permission to read.
+        :param user: The user for whom readable documents are to be fetched.
+        :return: A queryset of documents readable by the user.
+        """
+        if user.is_authenticated:
+            return self.filter(
+                models.Q(accesses__user=user)
+                | models.Q(accesses__team__in=user.teams)
+                | ~models.Q(link_reach=LinkReachChoices.RESTRICTED)
+            )
+
+        return self.filter(link_reach=LinkReachChoices.PUBLIC)
+
+
+class DocumentManager(MP_NodeManager):
+    """
+    Custom manager for the Document model, enabling the use of the custom
+    queryset methods directly from the model manager.
+    """
+
+    def get_queryset(self):
+        """
+        Overrides the default get_queryset method to return a custom queryset.
+        :return: An instance of DocumentQuerySet.
+        """
+        return DocumentQuerySet(self.model, using=self._db)
+
+    def readable_per_se(self, user):
+        """
+        Filters documents based on user permissions using the custom queryset.
+        :param user: The user for whom readable documents are to be fetched.
+        :return: A queryset of documents readable by the user.
+        """
+        return self.get_queryset().readable_per_se(user)
+
+
 class Document(MP_Node, BaseModel):
     """Pad document carrying the content."""
 
@@ -399,6 +494,8 @@ class Document(MP_Node, BaseModel):
 
     path = models.CharField(max_length=7 * 36, unique=True, db_collation="C")
 
+    objects = DocumentManager()
+
     class Meta:
         db_table = "impress_document"
         ordering = ("path",)
@@ -555,24 +652,47 @@ class Document(MP_Node, BaseModel):
         """Generate a unique cache key for each document."""
         return f"document_{self.id!s}_nb_accesses"
 
-    @property
-    def nb_accesses(self):
-        """Calculate the number of accesses."""
+    def get_nb_accesses(self):
+        """
+        Calculate the number of accesses:
+        - directly attached to the document
+        - attached to any of the document's ancestors
+        """
         cache_key = self.get_nb_accesses_cache_key()
         nb_accesses = cache.get(cache_key)
 
         if nb_accesses is None:
-            nb_accesses = DocumentAccess.objects.filter(
-                document__path=Left(models.Value(self.path), Length("document__path")),
-            ).count()
+            nb_accesses = (
+                DocumentAccess.objects.filter(document=self).count(),
+                DocumentAccess.objects.filter(
+                    document__path=Left(
+                        models.Value(self.path), Length("document__path")
+                    ),
+                    document__ancestors_deleted_at__isnull=True,
+                ).count(),
+            )
             cache.set(cache_key, nb_accesses)
 
         return nb_accesses
 
+    @property
+    def nb_accesses_direct(self):
+        """Returns the number of accesses related to the document or one of its ancestors."""
+        return self.get_nb_accesses()[0]
+
+    @property
+    def nb_accesses_ancestors(self):
+        """Returns the number of accesses related to the document or one of its ancestors."""
+        return self.get_nb_accesses()[1]
+
     def invalidate_nb_accesses_cache(self):
         """
         Invalidate the cache for number of accesses, including on affected descendants.
+        Args:
+            path: can optionally be passed as argument (useful when invalidating cache for a
+                document we just deleted)
         """
+
         for document in Document.objects.filter(path__startswith=self.path).only("id"):
             cache_key = document.get_nb_accesses_cache_key()
             cache.delete(cache_key)
@@ -596,25 +716,27 @@ class Document(MP_Node, BaseModel):
                 roles = []
         return roles
 
-    @cached_property
-    def links_definitions(self):
+    def get_links_definitions(self, ancestors_links):
         """Get links reach/role definitions for the current document and its ancestors."""
-        links_definitions = {self.link_reach: {self.link_role}}
 
-        # Ancestors links definitions are only interesting if the document is not the highest
-        # ancestor to which the current user has access. Look for the annotation:
-        if self.depth > 1 and not getattr(self, "is_highest_ancestor_for_user", False):
-            for ancestor in self.get_ancestors().values("link_reach", "link_role"):
-                links_definitions.setdefault(ancestor["link_reach"], set()).add(
-                    ancestor["link_role"]
-                )
+        links_definitions = defaultdict(set)
+        links_definitions[self.link_reach].add(self.link_role)
 
-        return links_definitions
+        # Merge ancestor link definitions
+        for ancestor in ancestors_links:
+            links_definitions[ancestor["link_reach"]].add(ancestor["link_role"])
 
-    def get_abilities(self, user):
+        return dict(links_definitions)  # Convert defaultdict back to a normal dict
+
+    def get_abilities(self, user, ancestors_links=None):
         """
         Compute and return abilities for a given user on the document.
         """
+        if self.depth <= 1 or getattr(self, "is_highest_ancestor_for_user", False):
+            ancestors_links = []
+        elif ancestors_links is None:
+            ancestors_links = self.get_ancestors().values("link_reach", "link_role")
+
         roles = set(
             self.get_roles(user)
         )  # at this point only roles based on specific access
@@ -634,9 +756,7 @@ class Document(MP_Node, BaseModel):
         ) and not is_deleted
 
         # Add roles provided by the document link, taking into account its ancestors
-
-        # Add roles provided by the document link
-        links_definitions = self.links_definitions
+        links_definitions = self.get_links_definitions(ancestors_links)
         public_roles = links_definitions.get(LinkReachChoices.PUBLIC, set())
         authenticated_roles = (
             links_definitions.get(LinkReachChoices.AUTHENTICATED, set())
@@ -671,6 +791,7 @@ class Document(MP_Node, BaseModel):
             "children_list": can_get,
             "children_create": can_update and user.is_authenticated,
             "collaboration_auth": can_get,
+            "descendants": can_get,
             "destroy": is_owner,
             "favorite": can_get and user.is_authenticated,
             "link_configuration": is_owner_or_admin,
@@ -680,6 +801,8 @@ class Document(MP_Node, BaseModel):
             "restore": is_owner,
             "retrieve": can_get,
             "media_auth": can_get,
+            "link_select_options": LinkReachChoices.get_select_options(ancestors_links),
+            "tree": can_get,
             "update": can_update,
             "versions_destroy": is_owner_or_admin,
             "versions_list": has_access_role,
@@ -697,7 +820,6 @@ class Document(MP_Node, BaseModel):
                 "document": self,
                 "domain": domain,
                 "link": f"{domain}/docs/{self.id}/",
-                "document_title": self.title or str(_("Untitled Document")),
                 "logo_img": settings.EMAIL_LOGO_IMG,
             }
         )
@@ -739,12 +861,8 @@ class Document(MP_Node, BaseModel):
                     '{name} invited you with the role "{role}" on the following document:'
                 ).format(name=sender_name_email, role=role.lower()),
             }
-            subject = (
-                context["title"]
-                if not self.title
-                else _("{name} shared a document with you: {title}").format(
-                    name=sender_name, title=self.title
-                )
+            subject = _("{name} shared a document with you: {title}").format(
+                name=sender_name, title=self.title
             )
 
         self.send_email(subject, [email], context, language)
@@ -755,19 +873,26 @@ class Document(MP_Node, BaseModel):
         Soft delete the document, marking the deletion on descendants.
         We still keep the .delete() method untouched for programmatic purposes.
         """
-        if self.deleted_at or self.ancestors_deleted_at:
+        if (
+            self._meta.model.objects.filter(
+                models.Q(deleted_at__isnull=False)
+                | models.Q(ancestors_deleted_at__isnull=False),
+                pk=self.pk,
+            ).exists()
+            or self.get_ancestors().filter(deleted_at__isnull=False).exists()
+        ):
             raise RuntimeError(
-                "This document is already deleted or has deleted ancestors."
-            )
-
-        # Check if any ancestors are deleted
-        if self.get_ancestors().filter(deleted_at__isnull=False).exists():
-            raise RuntimeError(
-                "Cannot delete this document because one or more ancestors are already deleted."
+                _("This document is already deleted or has deleted ancestors.")
             )
 
         self.ancestors_deleted_at = self.deleted_at = timezone.now()
         self.save()
+        self.invalidate_nb_accesses_cache()
+
+        if self.depth > 1:
+            self._meta.model.objects.filter(pk=self.get_parent().pk).update(
+                numchild=models.F("numchild") - 1
+            )
 
         # Mark all descendants as soft deleted
         self.get_descendants().filter(ancestors_deleted_at__isnull=True).update(
@@ -778,18 +903,14 @@ class Document(MP_Node, BaseModel):
     def restore(self):
         """Cancelling a soft delete with checks."""
         # This should not happen
-        if self.deleted_at is None:
-            raise ValidationError({"deleted_at": [_("This document is not deleted.")]})
+        if self._meta.model.objects.filter(
+            pk=self.pk, deleted_at__isnull=True
+        ).exists():
+            raise RuntimeError(_("This document is not deleted."))
 
         if self.deleted_at < get_trashbin_cutoff():
-            raise ValidationError(
-                {
-                    "deleted_at": [
-                        _(
-                            "This document was permanently deleted and cannot be restored."
-                        )
-                    ]
-                }
+            raise RuntimeError(
+                _("This document was permanently deleted and cannot be restored.")
             )
 
         # Restore the current document
@@ -799,15 +920,19 @@ class Document(MP_Node, BaseModel):
         ancestors_deleted_at = (
             self.get_ancestors()
             .filter(deleted_at__isnull=False)
-            .order_by("deleted_at")
             .values_list("deleted_at", flat=True)
-            .first()
         )
-        self.ancestors_deleted_at = ancestors_deleted_at
+        self.ancestors_deleted_at = min(ancestors_deleted_at, default=None)
         self.save()
+        self.invalidate_nb_accesses_cache()
+
+        if self.depth > 1:
+            self._meta.model.objects.filter(pk=self.get_parent().pk).update(
+                numchild=models.F("numchild") + 1
+            )
 
         # Update descendants excluding those who were deleted prior to the deletion of the
-        # current document (the ancestor_deleted_at date for those should already by good)
+        # current document (the ancestor_deleted_at date for those should already be good)
         # The number of deleted descendants should not be too big so we can handcraft a union
         # clause for them:
         deleted_descendants_paths = (

src/backend/core/tests/documents/test_api_documents_attachment_upload.py

@@ -79,7 +79,6 @@ def test_api_documents_attachment_upload_anonymous_success():
 
     assert file_head["Metadata"] == {"owner": "None"}
     assert file_head["ContentType"] == "image/png"
-    assert file_head["ContentDisposition"] == 'inline; filename="test.png"'
 
 
 @pytest.mark.parametrize(
@@ -218,7 +217,6 @@ def test_api_documents_attachment_upload_success(via, role, mock_user_teams):
     )
     assert file_head["Metadata"] == {"owner": str(user.id)}
     assert file_head["ContentType"] == "image/png"
-    assert file_head["ContentDisposition"] == 'inline; filename="test.png"'
 
 
 def test_api_documents_attachment_upload_invalid(client):
@@ -293,9 +291,7 @@ def test_api_documents_attachment_upload_fix_extension(
     match = pattern.search(file_path)
     file_id = match.group(1)
 
-    assert "-unsafe" in file_id
     # Validate that file_id is a valid UUID
-    file_id = file_id.replace("-unsafe", "")
     uuid.UUID(file_id)
 
     # Now, check the metadata of the uploaded file
@@ -305,7 +301,6 @@ def test_api_documents_attachment_upload_fix_extension(
     )
     assert file_head["Metadata"] == {"owner": str(user.id), "is_unsafe": "true"}
     assert file_head["ContentType"] == content_type
-    assert file_head["ContentDisposition"] == f'attachment; filename="{name:s}"'
 
 
 def test_api_documents_attachment_upload_empty_file():
@@ -345,9 +340,7 @@ def test_api_documents_attachment_upload_unsafe():
     match = pattern.search(file_path)
     file_id = match.group(1)
 
-    assert "-unsafe" in file_id
     # Validate that file_id is a valid UUID
-    file_id = file_id.replace("-unsafe", "")
     uuid.UUID(file_id)
 
     # Now, check the metadata of the uploaded file
@@ -357,4 +350,3 @@ def test_api_documents_attachment_upload_unsafe():
     )
     assert file_head["Metadata"] == {"owner": str(user.id), "is_unsafe": "true"}
     assert file_head["ContentType"] == "application/octet-stream"
-    assert file_head["ContentDisposition"] == 'attachment; filename="script.exe"'

src/backend/core/tests/documents/test_api_documents_children_create.py

@@ -1,5 +1,5 @@
 """
-Tests for Documents API endpoint in impress's core app: create
+Tests for Documents API endpoint in impress's core app: children create
 """
 
 from uuid import uuid4

src/backend/core/tests/documents/test_api_documents_children_list.py

@@ -1,5 +1,5 @@
 """
-Tests for Documents API endpoint in impress's core app: retrieve
+Tests for Documents API endpoint in impress's core app: children list
 """
 
 import random
@@ -15,7 +15,7 @@ pytestmark = pytest.mark.django_db
 
 
 def test_api_documents_children_list_anonymous_public_standalone():
-    """Anonymous users should be allowed to retrieve the children of a public documents."""
+    """Anonymous users should be allowed to retrieve the children of a public document."""
     document = factories.DocumentFactory(link_reach="public")
     child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
     factories.UserDocumentAccessFactory(document=child1)
@@ -39,7 +39,8 @@ def test_api_documents_children_list_anonymous_public_standalone():
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -56,7 +57,8 @@ def test_api_documents_children_list_anonymous_public_standalone():
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -100,7 +102,8 @@ def test_api_documents_children_list_anonymous_public_parent():
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -117,7 +120,8 @@ def test_api_documents_children_list_anonymous_public_parent():
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -179,7 +183,8 @@ def test_api_documents_children_list_authenticated_unrelated_public_or_authentic
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -196,7 +201,8 @@ def test_api_documents_children_list_authenticated_unrelated_public_or_authentic
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -244,7 +250,8 @@ def test_api_documents_children_list_authenticated_public_or_authenticated_paren
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -261,7 +268,8 @@ def test_api_documents_children_list_authenticated_public_or_authenticated_paren
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -331,7 +339,8 @@ def test_api_documents_children_list_authenticated_related_direct():
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 3,
+                "nb_accesses_ancestors": 3,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -348,7 +357,8 @@ def test_api_documents_children_list_authenticated_related_direct():
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 2,
+                "nb_accesses_ancestors": 2,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -399,7 +409,8 @@ def test_api_documents_children_list_authenticated_related_parent():
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 2,
+                "nb_accesses_ancestors": 2,
+                "nb_accesses_direct": 1,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -416,7 +427,8 @@ def test_api_documents_children_list_authenticated_related_parent():
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
@@ -514,7 +526,8 @@ def test_api_documents_children_list_authenticated_related_team_members(
                 "link_reach": child1.link_reach,
                 "link_role": child1.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
                 "path": child1.path,
                 "title": child1.title,
                 "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
@@ -531,7 +544,8 @@ def test_api_documents_children_list_authenticated_related_team_members(
                 "link_reach": child2.link_reach,
                 "link_role": child2.link_role,
                 "numchild": 0,
-                "nb_accesses": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
                 "path": child2.path,
                 "title": child2.title,
                 "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),

src/backend/core/tests/documents/test_api_documents_descendants.py

@@ -0,0 +1,696 @@
+"""
+Tests for Documents API endpoint in impress's core app: descendants
+"""
+
+import random
+
+from django.contrib.auth.models import AnonymousUser
+
+import pytest
+from rest_framework.test import APIClient
+
+from core import factories
+
+pytestmark = pytest.mark.django_db
+
+
+def test_api_documents_descendants_list_anonymous_public_standalone():
+    """Anonymous users should be allowed to retrieve the descendants of a public document."""
+    document = factories.DocumentFactory(link_reach="public")
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1)
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(AnonymousUser()),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 2,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": grand_child.get_abilities(AnonymousUser()),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 3,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": child2.get_abilities(AnonymousUser()),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 2,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+        ],
+    }
+
+
+def test_api_documents_descendants_list_anonymous_public_parent():
+    """
+    Anonymous users should be allowed to retrieve the descendants of a document who
+    has a public ancestor.
+    """
+    grand_parent = factories.DocumentFactory(link_reach="public")
+    parent = factories.DocumentFactory(
+        parent=grand_parent, link_reach=random.choice(["authenticated", "restricted"])
+    )
+    document = factories.DocumentFactory(
+        link_reach=random.choice(["authenticated", "restricted"]), parent=parent
+    )
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1)
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(AnonymousUser()),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 4,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": grand_child.get_abilities(AnonymousUser()),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 5,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": child2.get_abilities(AnonymousUser()),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 4,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+        ],
+    }
+
+
+@pytest.mark.parametrize("reach", ["restricted", "authenticated"])
+def test_api_documents_descendants_list_anonymous_restricted_or_authenticated(reach):
+    """
+    Anonymous users should not be able to retrieve descendants of a document that is not public.
+    """
+    document = factories.DocumentFactory(link_reach=reach)
+    child = factories.DocumentFactory(parent=document)
+    _grand_child = factories.DocumentFactory(parent=child)
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+
+    assert response.status_code == 401
+    assert response.json() == {
+        "detail": "Authentication credentials were not provided."
+    }
+
+
+@pytest.mark.parametrize("reach", ["public", "authenticated"])
+def test_api_documents_descendants_list_authenticated_unrelated_public_or_authenticated(
+    reach,
+):
+    """
+    Authenticated users should be able to retrieve the descendants of a public/authenticated
+    document to which they are not related.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach)
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1)
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/",
+    )
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(user),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 2,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": grand_child.get_abilities(user),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 3,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": child2.get_abilities(user),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 2,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+        ],
+    }
+
+
+@pytest.mark.parametrize("reach", ["public", "authenticated"])
+def test_api_documents_descendants_list_authenticated_public_or_authenticated_parent(
+    reach,
+):
+    """
+    Authenticated users should be allowed to retrieve the descendants of a document who
+    has a public or authenticated ancestor.
+    """
+    user = factories.UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    grand_parent = factories.DocumentFactory(link_reach=reach)
+    parent = factories.DocumentFactory(parent=grand_parent, link_reach="restricted")
+    document = factories.DocumentFactory(link_reach="restricted", parent=parent)
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1)
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(user),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 4,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": grand_child.get_abilities(user),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 5,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+            {
+                "abilities": child2.get_abilities(user),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 4,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 0,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [],
+            },
+        ],
+    }
+
+
+def test_api_documents_descendants_list_authenticated_unrelated_restricted():
+    """
+    Authenticated users should not be allowed to retrieve the descendants of a document that is
+    restricted and to which they are not related.
+    """
+    user = factories.UserFactory(with_owned_document=True)
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+    child1, _child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    _grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1)
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/",
+    )
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+
+
+def test_api_documents_descendants_list_authenticated_related_direct():
+    """
+    Authenticated users should be allowed to retrieve the descendants of a document
+    to which they are directly related whatever the role.
+    """
+    user = factories.UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory()
+    access = factories.UserDocumentAccessFactory(document=document, user=user)
+    factories.UserDocumentAccessFactory(document=document)
+
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    factories.UserDocumentAccessFactory(document=child1)
+
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/",
+    )
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(user),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 2,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 3,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+            {
+                "abilities": grand_child.get_abilities(user),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 3,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 3,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+            {
+                "abilities": child2.get_abilities(user),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 2,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 2,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+        ],
+    }
+
+
+def test_api_documents_descendants_list_authenticated_related_parent():
+    """
+    Authenticated users should be allowed to retrieve the descendants of a document if they
+    are related to one of its ancestors whatever the role.
+    """
+    user = factories.UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    grand_parent = factories.DocumentFactory(link_reach="restricted")
+    grand_parent_access = factories.UserDocumentAccessFactory(
+        document=grand_parent, user=user
+    )
+
+    parent = factories.DocumentFactory(parent=grand_parent, link_reach="restricted")
+    document = factories.DocumentFactory(parent=parent, link_reach="restricted")
+
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    factories.UserDocumentAccessFactory(document=child1)
+
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/",
+    )
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(user),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 4,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 2,
+                "nb_accesses_direct": 1,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [grand_parent_access.role],
+            },
+            {
+                "abilities": grand_child.get_abilities(user),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 5,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 2,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [grand_parent_access.role],
+            },
+            {
+                "abilities": child2.get_abilities(user),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 4,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [grand_parent_access.role],
+            },
+        ],
+    }
+
+
+def test_api_documents_descendants_list_authenticated_related_child():
+    """
+    Authenticated users should not be allowed to retrieve all the descendants of a document
+    as a result of being related to one of its children.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+    child1, _child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    _grand_child = factories.DocumentFactory(parent=child1)
+
+    factories.UserDocumentAccessFactory(document=child1, user=user)
+    factories.UserDocumentAccessFactory(document=document)
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/",
+    )
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+
+
+def test_api_documents_descendants_list_authenticated_related_team_none(
+    mock_user_teams,
+):
+    """
+    Authenticated users should not be able to retrieve the descendants of a restricted document
+    related to teams in which the user is not.
+    """
+    mock_user_teams.return_value = []
+
+    user = factories.UserFactory(with_owned_document=True)
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+    factories.DocumentFactory.create_batch(2, parent=document)
+
+    factories.TeamDocumentAccessFactory(document=document, team="myteam")
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+
+
+def test_api_documents_descendants_list_authenticated_related_team_members(
+    mock_user_teams,
+):
+    """
+    Authenticated users should be allowed to retrieve the descendants of a document to which they
+    are related via a team whatever the role.
+    """
+    mock_user_teams.return_value = ["myteam"]
+
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+    child1, child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    grand_child = factories.DocumentFactory(parent=child1)
+
+    access = factories.TeamDocumentAccessFactory(document=document, team="myteam")
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/descendants/")
+
+    # pylint: disable=R0801
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 3,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "abilities": child1.get_abilities(user),
+                "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child1.creator.id),
+                "depth": 2,
+                "excerpt": child1.excerpt,
+                "id": str(child1.id),
+                "is_favorite": False,
+                "link_reach": child1.link_reach,
+                "link_role": child1.link_role,
+                "numchild": 1,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": child1.path,
+                "title": child1.title,
+                "updated_at": child1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+            {
+                "abilities": grand_child.get_abilities(user),
+                "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(grand_child.creator.id),
+                "depth": 3,
+                "excerpt": grand_child.excerpt,
+                "id": str(grand_child.id),
+                "is_favorite": False,
+                "link_reach": grand_child.link_reach,
+                "link_role": grand_child.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": grand_child.path,
+                "title": grand_child.title,
+                "updated_at": grand_child.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+            {
+                "abilities": child2.get_abilities(user),
+                "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
+                "creator": str(child2.creator.id),
+                "depth": 2,
+                "excerpt": child2.excerpt,
+                "id": str(child2.id),
+                "is_favorite": False,
+                "link_reach": child2.link_reach,
+                "link_role": child2.link_role,
+                "numchild": 0,
+                "nb_accesses_ancestors": 1,
+                "nb_accesses_direct": 0,
+                "path": child2.path,
+                "title": child2.title,
+                "updated_at": child2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user_roles": [access.role],
+            },
+        ],
+    }

src/backend/core/tests/documents/test_api_documents_descendants_filters.py

@@ -0,0 +1,88 @@
+"""
+Tests for Documents API endpoint in impress's core app: list
+"""
+
+import pytest
+from faker import Faker
+from rest_framework.test import APIClient
+
+from core import factories
+
+fake = Faker()
+pytestmark = pytest.mark.django_db
+
+
+# Filters: unknown field
+
+
+def test_api_documents_descendants_filter_unknown_field():
+    """
+    Trying to filter by an unknown field should be ignored.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    factories.DocumentFactory()
+
+    document = factories.DocumentFactory(users=[user])
+    expected_ids = {
+        str(document.id)
+        for document in factories.DocumentFactory.create_batch(2, parent=document)
+    }
+
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/?unknown=true"
+    )
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert len(results) == 2
+    assert {result["id"] for result in results} == expected_ids
+
+
+# Filters: title
+
+
+@pytest.mark.parametrize(
+    "query,nb_results",
+    [
+        ("Project Alpha", 1),  # Exact match
+        ("project", 2),  # Partial match (case-insensitive)
+        ("Guide", 1),  # Word match within a title
+        ("Special", 0),  # No match (nonexistent keyword)
+        ("2024", 2),  # Match by numeric keyword
+        ("", 5),  # Empty string
+    ],
+)
+def test_api_documents_descendants_filter_title(query, nb_results):
+    """Authenticated users should be able to search documents by their title."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(users=[user])
+
+    # Create documents with predefined titles
+    titles = [
+        "Project Alpha Documentation",
+        "Project Beta Overview",
+        "User Guide",
+        "Financial Report 2024",
+        "Annual Review 2024",
+    ]
+    for title in titles:
+        factories.DocumentFactory(title=title, parent=document)
+
+    # Perform the search query
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/descendants/?title={query:s}"
+    )
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert len(results) == nb_results
+
+    # Ensure all results contain the query in their title
+    for result in results:
+        assert query.lower().strip() in result["title"].lower()

src/backend/core/tests/documents/test_api_documents_list.py

@@ -70,7 +70,8 @@ def test_api_documents_list_format():
         "is_favorite": True,
         "link_reach": document.link_reach,
         "link_role": document.link_role,
-        "nb_accesses": 3,
+        "nb_accesses_ancestors": 3,
+        "nb_accesses_direct": 3,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -147,7 +148,7 @@ def test_api_documents_list_authenticated_direct(django_assert_num_queries):
         str(child4_with_access.id),
     }
 
-    with django_assert_num_queries(8):
+    with django_assert_num_queries(12):
         response = client.get("/api/v1.0/documents/")
 
     # nb_accesses should now be cached
@@ -185,7 +186,7 @@ def test_api_documents_list_authenticated_via_team(
 
     expected_ids = {str(document.id) for document in documents_team1 + documents_team2}
 
-    with django_assert_num_queries(9):
+    with django_assert_num_queries(14):
         response = client.get("/api/v1.0/documents/")
 
     # nb_accesses should now be cached
@@ -218,7 +219,7 @@ def test_api_documents_list_authenticated_link_reach_restricted(
     other_document = factories.DocumentFactory(link_reach="public")
     models.LinkTrace.objects.create(document=other_document, user=user)
 
-    with django_assert_num_queries(5):
+    with django_assert_num_queries(6):
         response = client.get("/api/v1.0/documents/")
 
     # nb_accesses should now be cached
@@ -267,7 +268,7 @@ def test_api_documents_list_authenticated_link_reach_public_or_authenticated(
 
     expected_ids = {str(document1.id), str(document2.id), str(visible_child.id)}
 
-    with django_assert_num_queries(7):
+    with django_assert_num_queries(10):
         response = client.get("/api/v1.0/documents/")
 
     # nb_accesses should now be cached
@@ -328,6 +329,35 @@ def test_api_documents_list_pagination(
     assert document_ids == []
 
 
+def test_api_documents_list_pagination_force_page_size():
+    """Page size can be set via querystring."""
+    user = factories.UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    document_ids = [
+        str(access.document_id)
+        for access in factories.UserDocumentAccessFactory.create_batch(3, user=user)
+    ]
+
+    # Force page size
+    response = client.get(
+        "/api/v1.0/documents/?page_size=2",
+    )
+
+    assert response.status_code == 200
+    content = response.json()
+
+    assert content["count"] == 3
+    assert content["next"] == "http://testserver/api/v1.0/documents/?page=2&page_size=2"
+    assert content["previous"] is None
+
+    assert len(content["results"]) == 2
+    for item in content["results"]:
+        document_ids.remove(item["id"])
+
+
 def test_api_documents_list_authenticated_distinct():
     """A document with several related users should only be listed once."""
     user = factories.UserFactory()
@@ -362,7 +392,7 @@ def test_api_documents_list_favorites_no_extra_queries(django_assert_num_queries
     factories.DocumentFactory.create_batch(2, users=[user])
 
     url = "/api/v1.0/documents/"
-    with django_assert_num_queries(9):
+    with django_assert_num_queries(14):
         response = client.get(url)
 
     # nb_accesses should now be cached

src/backend/core/tests/documents/test_api_documents_media_auth.py

@@ -64,30 +64,6 @@ def test_api_documents_media_auth_anonymous_public():
     assert response.content.decode("utf-8") == "my prose"
 
 
-def test_api_documents_media_auth_extensions():
-    """Files with extensions of any format should work."""
-    document = factories.DocumentFactory(link_reach="public")
-
-    extensions = [
-        "c",
-        "go",
-        "gif",
-        "mp4",
-        "woff2",
-        "appimage",
-    ]
-    for ext in extensions:
-        filename = f"{uuid.uuid4()!s}.{ext:s}"
-        key = f"{document.pk!s}/attachments/{filename:s}"
-
-        original_url = f"http://localhost/media/{key:s}"
-        response = APIClient().get(
-            "/api/v1.0/documents/media-auth/", HTTP_X_ORIGINAL_URL=original_url
-        )
-
-        assert response.status_code == 200
-
-
 @pytest.mark.parametrize("reach", ["authenticated", "restricted"])
 def test_api_documents_media_auth_anonymous_authenticated_or_restricted(reach):
     """

src/backend/core/tests/documents/test_api_documents_retrieve.py

@@ -34,16 +34,23 @@ def test_api_documents_retrieve_anonymous_public_standalone():
             "children_create": False,
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": False,
             # Anonymous user can't favorite a document even with read access
             "favorite": False,
             "invite_owner": False,
             "link_configuration": False,
+            "link_select_options": {
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+                "restricted": ["reader", "editor"],
+            },
             "media_auth": True,
             "move": False,
             "partial_update": document.link_role == "editor",
             "restore": False,
             "retrieve": True,
+            "tree": True,
             "update": document.link_role == "editor",
             "versions_destroy": False,
             "versions_list": False,
@@ -57,7 +64,8 @@ def test_api_documents_retrieve_anonymous_public_standalone():
         "is_favorite": False,
         "link_reach": "public",
         "link_role": document.link_role,
-        "nb_accesses": 0,
+        "nb_accesses_ancestors": 0,
+        "nb_accesses_direct": 0,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -79,6 +87,7 @@ def test_api_documents_retrieve_anonymous_public_parent():
     response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/")
 
     assert response.status_code == 200
+    links = document.get_ancestors().values("link_reach", "link_role")
     assert response.json() == {
         "id": str(document.id),
         "abilities": {
@@ -90,16 +99,19 @@ def test_api_documents_retrieve_anonymous_public_parent():
             "children_create": False,
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": False,
             # Anonymous user can't favorite a document even with read access
             "favorite": False,
             "invite_owner": False,
             "link_configuration": False,
+            "link_select_options": models.LinkReachChoices.get_select_options(links),
             "media_auth": True,
             "move": False,
             "partial_update": grand_parent.link_role == "editor",
             "restore": False,
             "retrieve": True,
+            "tree": True,
             "update": grand_parent.link_role == "editor",
             "versions_destroy": False,
             "versions_list": False,
@@ -113,7 +125,8 @@ def test_api_documents_retrieve_anonymous_public_parent():
         "is_favorite": False,
         "link_reach": document.link_reach,
         "link_role": document.link_role,
-        "nb_accesses": 0,
+        "nb_accesses_ancestors": 0,
+        "nb_accesses_direct": 0,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -180,15 +193,22 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
             "children_create": document.link_role == "editor",
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": False,
             "favorite": True,
             "invite_owner": False,
             "link_configuration": False,
+            "link_select_options": {
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+                "restricted": ["reader", "editor"],
+            },
             "media_auth": True,
             "move": False,
             "partial_update": document.link_role == "editor",
             "restore": False,
             "retrieve": True,
+            "tree": True,
             "update": document.link_role == "editor",
             "versions_destroy": False,
             "versions_list": False,
@@ -202,7 +222,8 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
         "is_favorite": False,
         "link_reach": reach,
         "link_role": document.link_role,
-        "nb_accesses": 0,
+        "nb_accesses_ancestors": 0,
+        "nb_accesses_direct": 0,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -232,6 +253,7 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
     response = client.get(f"/api/v1.0/documents/{document.id!s}/")
 
     assert response.status_code == 200
+    links = document.get_ancestors().values("link_reach", "link_role")
     assert response.json() == {
         "id": str(document.id),
         "abilities": {
@@ -243,15 +265,18 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
             "children_create": grand_parent.link_role == "editor",
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": False,
             "favorite": True,
             "invite_owner": False,
             "link_configuration": False,
+            "link_select_options": models.LinkReachChoices.get_select_options(links),
             "move": False,
             "media_auth": True,
             "partial_update": grand_parent.link_role == "editor",
             "restore": False,
             "retrieve": True,
+            "tree": True,
             "update": grand_parent.link_role == "editor",
             "versions_destroy": False,
             "versions_list": False,
@@ -265,7 +290,8 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
         "is_favorite": False,
         "link_reach": document.link_reach,
         "link_role": document.link_role,
-        "nb_accesses": 0,
+        "nb_accesses_ancestors": 0,
+        "nb_accesses_direct": 0,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -374,7 +400,8 @@ def test_api_documents_retrieve_authenticated_related_direct():
         "is_favorite": False,
         "link_reach": document.link_reach,
         "link_role": document.link_role,
-        "nb_accesses": 2,
+        "nb_accesses_ancestors": 2,
+        "nb_accesses_direct": 2,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -404,6 +431,7 @@ def test_api_documents_retrieve_authenticated_related_parent():
         f"/api/v1.0/documents/{document.id!s}/",
     )
     assert response.status_code == 200
+    links = document.get_ancestors().values("link_reach", "link_role")
     assert response.json() == {
         "id": str(document.id),
         "abilities": {
@@ -415,15 +443,18 @@ def test_api_documents_retrieve_authenticated_related_parent():
             "children_create": access.role != "reader",
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": access.role == "owner",
             "favorite": True,
             "invite_owner": access.role == "owner",
             "link_configuration": access.role in ["administrator", "owner"],
+            "link_select_options": models.LinkReachChoices.get_select_options(links),
             "media_auth": True,
             "move": access.role in ["administrator", "owner"],
             "partial_update": access.role != "reader",
             "restore": access.role == "owner",
             "retrieve": True,
+            "tree": True,
             "update": access.role != "reader",
             "versions_destroy": access.role in ["administrator", "owner"],
             "versions_list": True,
@@ -437,7 +468,8 @@ def test_api_documents_retrieve_authenticated_related_parent():
         "is_favorite": False,
         "link_reach": "restricted",
         "link_role": document.link_role,
-        "nb_accesses": 2,
+        "nb_accesses_ancestors": 2,
+        "nb_accesses_direct": 0,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -465,7 +497,8 @@ def test_api_documents_retrieve_authenticated_related_nb_accesses():
         f"/api/v1.0/documents/{document.id!s}/",
     )
     assert response.status_code == 200
-    assert response.json()["nb_accesses"] == 3
+    assert response.json()["nb_accesses_ancestors"] == 3
+    assert response.json()["nb_accesses_direct"] == 1
 
     factories.UserDocumentAccessFactory(document=grand_parent)
 
@@ -473,7 +506,8 @@ def test_api_documents_retrieve_authenticated_related_nb_accesses():
         f"/api/v1.0/documents/{document.id!s}/",
     )
     assert response.status_code == 200
-    assert response.json()["nb_accesses"] == 4
+    assert response.json()["nb_accesses_ancestors"] == 4
+    assert response.json()["nb_accesses_direct"] == 1
 
 
 def test_api_documents_retrieve_authenticated_related_child():
@@ -554,12 +588,10 @@ def test_api_documents_retrieve_authenticated_related_team_members(
     mock_user_teams.return_value = teams
 
     user = factories.UserFactory()
-
     client = APIClient()
     client.force_login(user)
 
     document = factories.DocumentFactory(link_reach="restricted")
-
     factories.TeamDocumentAccessFactory(
         document=document, team="readers", role="reader"
     )
@@ -588,7 +620,8 @@ def test_api_documents_retrieve_authenticated_related_team_members(
         "is_favorite": False,
         "link_reach": "restricted",
         "link_role": document.link_role,
-        "nb_accesses": 5,
+        "nb_accesses_ancestors": 5,
+        "nb_accesses_direct": 5,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -649,7 +682,8 @@ def test_api_documents_retrieve_authenticated_related_team_administrators(
         "is_favorite": False,
         "link_reach": "restricted",
         "link_role": document.link_role,
-        "nb_accesses": 5,
+        "nb_accesses_ancestors": 5,
+        "nb_accesses_direct": 5,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -710,7 +744,8 @@ def test_api_documents_retrieve_authenticated_related_team_owners(
         "is_favorite": False,
         "link_reach": "restricted",
         "link_role": document.link_role,
-        "nb_accesses": 5,
+        "nb_accesses_ancestors": 5,
+        "nb_accesses_direct": 5,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -719,7 +754,7 @@ def test_api_documents_retrieve_authenticated_related_team_owners(
     }
 
 
-def test_api_documents_retrieve_user_roles(django_assert_num_queries):
+def test_api_documents_retrieve_user_roles(django_assert_max_num_queries):
     """
     Roles should be annotated on querysets taking into account all documents ancestors.
     """
@@ -744,7 +779,7 @@ def test_api_documents_retrieve_user_roles(django_assert_num_queries):
     )
     expected_roles = {access.role for access in accesses}
 
-    with django_assert_num_queries(10):
+    with django_assert_max_num_queries(12):
         response = client.get(f"/api/v1.0/documents/{document.id!s}/")
 
     assert response.status_code == 200
@@ -761,7 +796,7 @@ def test_api_documents_retrieve_numqueries_with_link_trace(django_assert_num_que
 
     document = factories.DocumentFactory(users=[user], link_traces=[user])
 
-    with django_assert_num_queries(4):
+    with django_assert_num_queries(5):
         response = client.get(f"/api/v1.0/documents/{document.id!s}/")
 
     with django_assert_num_queries(3):

src/backend/core/tests/documents/test_api_documents_trashbin.py

@@ -78,15 +78,22 @@ def test_api_documents_trashbin_format():
             "children_create": True,
             "children_list": True,
             "collaboration_auth": True,
+            "descendants": True,
             "destroy": True,
             "favorite": True,
             "invite_owner": True,
             "link_configuration": True,
+            "link_select_options": {
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+                "restricted": ["reader", "editor"],
+            },
             "media_auth": True,
             "move": False,  # Can't move a deleted document
             "partial_update": True,
             "restore": True,
             "retrieve": True,
+            "tree": True,
             "update": True,
             "versions_destroy": True,
             "versions_list": True,
@@ -98,7 +105,8 @@ def test_api_documents_trashbin_format():
         "excerpt": document.excerpt,
         "link_reach": document.link_reach,
         "link_role": document.link_role,
-        "nb_accesses": 3,
+        "nb_accesses_ancestors": 0,
+        "nb_accesses_direct": 3,
         "numchild": 0,
         "path": document.path,
         "title": document.title,
@@ -147,7 +155,7 @@ def test_api_documents_trashbin_authenticated_direct(django_assert_num_queries):
 
     expected_ids = {str(document1.id), str(document2.id), str(document3.id)}
 
-    with django_assert_num_queries(7):
+    with django_assert_num_queries(10):
         response = client.get("/api/v1.0/documents/trashbin/")
 
     with django_assert_num_queries(4):
@@ -189,7 +197,7 @@ def test_api_documents_trashbin_authenticated_via_team(
 
     expected_ids = {str(deleted_document_team1.id), str(deleted_document_team2.id)}
 
-    with django_assert_num_queries(5):
+    with django_assert_num_queries(7):
         response = client.get("/api/v1.0/documents/trashbin/")
 
     with django_assert_num_queries(3):

src/backend/core/tests/documents/test_api_documents_update.py

@@ -275,7 +275,8 @@ def test_api_documents_update_authenticated_editor_administrator_or_owner(
             "depth",
             "link_reach",
             "link_role",
-            "nb_accesses",
+            "nb_accesses_ancestors",
+            "nb_accesses_direct",
             "numchild",
             "path",
         ]:

src/backend/core/tests/test_api_utils_nest_tree.py

@@ -0,0 +1,107 @@
+"""Unit tests for the nest_tree utility function."""
+
+import pytest
+
+from core.api.utils import nest_tree
+
+
+def test_api_utils_nest_tree_empty_list():
+    """Test that an empty list returns an empty nested structure."""
+    # pylint: disable=use-implicit-booleaness-not-comparison
+    assert nest_tree([], 4) is None
+
+
+def test_api_utils_nest_tree_single_document():
+    """Test that a single document is returned as the only root element."""
+    documents = [{"id": "1", "path": "0001"}]
+    expected = {"id": "1", "path": "0001", "children": []}
+    assert nest_tree(documents, 4) == expected
+
+
+def test_api_utils_nest_tree_multiple_root_documents():
+    """Test that multiple root-level documents are correctly added to the root."""
+    documents = [
+        {"id": "1", "path": "0001"},
+        {"id": "2", "path": "0002"},
+    ]
+    with pytest.raises(
+        ValueError,
+        match="More than one root element detected.",
+    ):
+        nest_tree(documents, 4)
+
+
+def test_api_utils_nest_tree_nested_structure():
+    """Test that documents are correctly nested based on path levels."""
+    documents = [
+        {"id": "1", "path": "0001"},
+        {"id": "2", "path": "00010001"},
+        {"id": "3", "path": "000100010001"},
+        {"id": "4", "path": "00010002"},
+    ]
+    expected = {
+        "id": "1",
+        "path": "0001",
+        "children": [
+            {
+                "id": "2",
+                "path": "00010001",
+                "children": [{"id": "3", "path": "000100010001", "children": []}],
+            },
+            {"id": "4", "path": "00010002", "children": []},
+        ],
+    }
+    assert nest_tree(documents, 4) == expected
+
+
+def test_api_utils_nest_tree_siblings_at_same_path():
+    """
+    Test that sibling documents with the same path are correctly grouped under the same parent.
+    """
+    documents = [
+        {"id": "1", "path": "0001"},
+        {"id": "2", "path": "00010001"},
+        {"id": "3", "path": "00010002"},
+    ]
+    expected = {
+        "id": "1",
+        "path": "0001",
+        "children": [
+            {"id": "2", "path": "00010001", "children": []},
+            {"id": "3", "path": "00010002", "children": []},
+        ],
+    }
+    assert nest_tree(documents, 4) == expected
+
+
+def test_api_utils_nest_tree_decreasing_path_resets_parent():
+    """Test that a document at a lower path resets the parent assignment correctly."""
+    documents = [
+        {"id": "1", "path": "0001"},
+        {"id": "6", "path": "00010001"},
+        {"id": "2", "path": "00010002"},  # unordered
+        {"id": "5", "path": "000100010001"},
+        {"id": "3", "path": "000100010002"},
+        {"id": "4", "path": "00010003"},
+    ]
+    expected = {
+        "id": "1",
+        "path": "0001",
+        "children": [
+            {
+                "id": "6",
+                "path": "00010001",
+                "children": [
+                    {"id": "5", "path": "000100010001", "children": []},
+                    {"id": "3", "path": "000100010002", "children": []},
+                ],
+            },
+            {
+                "id": "2",
+                "path": "00010002",
+                "children": [],
+            },
+            {"id": "4", "path": "00010003", "children": []},
+        ],
+    }
+    assert nest_tree(documents, 4) == expected

src/backend/core/tests/test_models_documents.py

@@ -1,6 +1,7 @@
 """
 Unit tests for the Document model
 """
+# pylint: disable=too-many-lines
 
 import random
 import smtplib
@@ -157,15 +158,22 @@ def test_models_documents_get_abilities_forbidden(
         "children_create": False,
         "children_list": False,
         "collaboration_auth": False,
+        "descendants": False,
         "destroy": False,
         "favorite": False,
         "invite_owner": False,
         "media_auth": False,
         "move": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "partial_update": False,
         "restore": False,
         "retrieve": False,
+        "tree": False,
         "update": False,
         "versions_destroy": False,
         "versions_list": False,
@@ -208,15 +216,22 @@ def test_models_documents_get_abilities_reader(
         "children_create": False,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": is_authenticated,
         "invite_owner": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": False,
         "partial_update": False,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": False,
         "versions_destroy": False,
         "versions_list": False,
@@ -225,9 +240,14 @@ def test_models_documents_get_abilities_reader(
     nb_queries = 1 if is_authenticated else 0
     with django_assert_num_queries(nb_queries):
         assert document.get_abilities(user) == expected_abilities
+
     document.soft_delete()
     document.refresh_from_db()
-    assert all(value is False for value in document.get_abilities(user).values())
+    assert all(
+        value is False
+        for key, value in document.get_abilities(user).items()
+        if key != "link_select_options"
+    )
 
 
 @pytest.mark.parametrize(
@@ -256,15 +276,22 @@ def test_models_documents_get_abilities_editor(
         "children_create": is_authenticated,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": is_authenticated,
         "invite_owner": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": False,
         "partial_update": True,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": True,
         "versions_destroy": False,
         "versions_list": False,
@@ -275,7 +302,11 @@ def test_models_documents_get_abilities_editor(
         assert document.get_abilities(user) == expected_abilities
     document.soft_delete()
     document.refresh_from_db()
-    assert all(value is False for value in document.get_abilities(user).values())
+    assert all(
+        value is False
+        for key, value in document.get_abilities(user).items()
+        if key != "link_select_options"
+    )
 
 
 @override_settings(
@@ -294,15 +325,22 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": True,
         "favorite": True,
         "invite_owner": True,
         "link_configuration": True,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": True,
         "partial_update": True,
         "restore": True,
         "retrieve": True,
+        "tree": True,
         "update": True,
         "versions_destroy": True,
         "versions_list": True,
@@ -333,15 +371,22 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": True,
         "invite_owner": False,
         "link_configuration": True,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": True,
         "partial_update": True,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": True,
         "versions_destroy": True,
         "versions_list": True,
@@ -352,7 +397,11 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
 
     document.soft_delete()
     document.refresh_from_db()
-    assert all(value is False for value in document.get_abilities(user).values())
+    assert all(
+        value is False
+        for key, value in document.get_abilities(user).items()
+        if key != "link_select_options"
+    )
 
 
 @override_settings(
@@ -371,15 +420,22 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": True,
         "invite_owner": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": False,
         "partial_update": True,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": True,
         "versions_destroy": False,
         "versions_list": True,
@@ -390,7 +446,11 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
 
     document.soft_delete()
     document.refresh_from_db()
-    assert all(value is False for value in document.get_abilities(user).values())
+    assert all(
+        value is False
+        for key, value in document.get_abilities(user).items()
+        if key != "link_select_options"
+    )
 
 
 @pytest.mark.parametrize("ai_access_setting", ["public", "authenticated", "restricted"])
@@ -416,15 +476,22 @@ def test_models_documents_get_abilities_reader_user(
         "children_create": access_from_link,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": True,
         "invite_owner": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": False,
         "partial_update": access_from_link,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": access_from_link,
         "versions_destroy": False,
         "versions_list": True,
@@ -437,7 +504,11 @@ def test_models_documents_get_abilities_reader_user(
 
         document.soft_delete()
         document.refresh_from_db()
-        assert all(value is False for value in document.get_abilities(user).values())
+        assert all(
+            value is False
+            for key, value in document.get_abilities(user).items()
+            if key != "link_select_options"
+        )
 
 
 def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
@@ -459,15 +530,22 @@ def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
         "children_create": False,
         "children_list": True,
         "collaboration_auth": True,
+        "descendants": True,
         "destroy": False,
         "favorite": True,
         "invite_owner": False,
         "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": ["reader", "editor"],
+        },
         "media_auth": True,
         "move": False,
         "partial_update": False,
         "restore": False,
         "retrieve": True,
+        "tree": True,
         "update": False,
         "versions_destroy": False,
         "versions_list": True,
@@ -636,37 +714,6 @@ def test_models_documents__email_invitation__success():
     assert f"docs/{document.id}/" in email_content
 
 
-def test_models_documents__email_invitation__success_empty_title():
-    """
-    The email invitation is sent successfully.
-    """
-    document = factories.DocumentFactory(title=None)
-
-    # pylint: disable-next=no-member
-    assert len(mail.outbox) == 0
-
-    sender = factories.UserFactory(full_name="Test Sender", email="sender@example.com")
-    document.send_invitation_email(
-        "guest@example.com", models.RoleChoices.EDITOR, sender, "en"
-    )
-
-    # pylint: disable-next=no-member
-    assert len(mail.outbox) == 1
-
-    # pylint: disable-next=no-member
-    email = mail.outbox[0]
-
-    assert email.to == ["guest@example.com"]
-    email_content = " ".join(email.body.split())
-
-    assert "Test sender shared a document with you!" in email.subject
-    assert (
-        "Test Sender (sender@example.com) invited you with the role "editor" "
-        "on the following document: Untitled Document" in email_content
-    )
-    assert f"docs/{document.id}/" in email_content
-
-
 def test_models_documents__email_invitation__success_fr():
     """
     The email invitation is sent successfully in french.
@@ -742,40 +789,89 @@ def test_models_documents__email_invitation__failed(mock_logger, _mock_send_mail
 # Document number of accesses
 
 
-def test_models_documents_nb_accesses_cache_is_set_and_retrieved(
+def test_models_documents_nb_accesses_cache_is_set_and_retrieved_ancestors(
     django_assert_num_queries,
 ):
-    """Test that nb_accesses is cached after the first computation."""
-    document = factories.DocumentFactory()
+    """Test that nb_accesses is cached when calling nb_accesses_ancestors."""
+    parent = factories.DocumentFactory()
+    document = factories.DocumentFactory(parent=parent)
     key = f"document_{document.id!s}_nb_accesses"
-    nb_accesses = random.randint(1, 4)
-    factories.UserDocumentAccessFactory.create_batch(nb_accesses, document=document)
+    nb_accesses_parent = random.randint(1, 4)
+    factories.UserDocumentAccessFactory.create_batch(
+        nb_accesses_parent, document=parent
+    )
+    nb_accesses_direct = random.randint(1, 4)
+    factories.UserDocumentAccessFactory.create_batch(
+        nb_accesses_direct, document=document
+    )
     factories.UserDocumentAccessFactory()  # An unrelated access should not be counted
 
     # Initially, the nb_accesses should not be cached
     assert cache.get(key) is None
 
     # Compute the nb_accesses for the first time (this should set the cache)
-    with django_assert_num_queries(1):
-        assert document.nb_accesses == nb_accesses
+    nb_accesses_ancestors = nb_accesses_parent + nb_accesses_direct
+    with django_assert_num_queries(2):
+        assert document.nb_accesses_ancestors == nb_accesses_ancestors
 
     # Ensure that the nb_accesses is now cached
     with django_assert_num_queries(0):
-        assert document.nb_accesses == nb_accesses
-    assert cache.get(key) == nb_accesses
+        assert document.nb_accesses_ancestors == nb_accesses_ancestors
+    assert cache.get(key) == (nb_accesses_direct, nb_accesses_ancestors)
 
     # The cache value should be invalidated when a document access is created
     models.DocumentAccess.objects.create(
         document=document, user=factories.UserFactory(), role="reader"
     )
     assert cache.get(key) is None  # Cache should be invalidated
-    with django_assert_num_queries(1):
-        new_nb_accesses = document.nb_accesses
-    assert new_nb_accesses == nb_accesses + 1
-    assert cache.get(key) == new_nb_accesses  # Cache should now contain the new value
+    with django_assert_num_queries(2):
+        assert document.nb_accesses_ancestors == nb_accesses_ancestors + 1
+    assert cache.get(key) == (nb_accesses_direct + 1, nb_accesses_ancestors + 1)
 
 
+def test_models_documents_nb_accesses_cache_is_set_and_retrieved_direct(
+    django_assert_num_queries,
+):
+    """Test that nb_accesses is cached when calling nb_accesses_direct."""
+    parent = factories.DocumentFactory()
+    document = factories.DocumentFactory(parent=parent)
+    key = f"document_{document.id!s}_nb_accesses"
+    nb_accesses_parent = random.randint(1, 4)
+    factories.UserDocumentAccessFactory.create_batch(
+        nb_accesses_parent, document=parent
+    )
+    nb_accesses_direct = random.randint(1, 4)
+    factories.UserDocumentAccessFactory.create_batch(
+        nb_accesses_direct, document=document
+    )
+    factories.UserDocumentAccessFactory()  # An unrelated access should not be counted
+
+    # Initially, the nb_accesses should not be cached
+    assert cache.get(key) is None
+
+    # Compute the nb_accesses for the first time (this should set the cache)
+    nb_accesses_ancestors = nb_accesses_parent + nb_accesses_direct
+    with django_assert_num_queries(2):
+        assert document.nb_accesses_direct == nb_accesses_direct
+
+    # Ensure that the nb_accesses is now cached
+    with django_assert_num_queries(0):
+        assert document.nb_accesses_direct == nb_accesses_direct
+    assert cache.get(key) == (nb_accesses_direct, nb_accesses_ancestors)
+
+    # The cache value should be invalidated when a document access is created
+    models.DocumentAccess.objects.create(
+        document=document, user=factories.UserFactory(), role="reader"
+    )
+    assert cache.get(key) is None  # Cache should be invalidated
+    with django_assert_num_queries(2):
+        assert document.nb_accesses_direct == nb_accesses_direct + 1
+    assert cache.get(key) == (nb_accesses_direct + 1, nb_accesses_ancestors + 1)
+
+
+@pytest.mark.parametrize("field", ["nb_accesses_ancestors", "nb_accesses_direct"])
 def test_models_documents_nb_accesses_cache_is_invalidated_on_access_removal(
+    field,
     django_assert_num_queries,
 ):
     """Test that the cache is invalidated when a document access is deleted."""
@@ -784,15 +880,262 @@ def test_models_documents_nb_accesses_cache_is_invalidated_on_access_removal(
     access = factories.UserDocumentAccessFactory(document=document)
 
     # Initially, the nb_accesses should be cached
-    assert document.nb_accesses == 1
-    assert cache.get(key) == 1
+    assert getattr(document, field) == 1
+    assert cache.get(key) == (1, 1)
 
     # Remove the access and check if cache is invalidated
     access.delete()
     assert cache.get(key) is None  # Cache should be invalidated
 
     # Recompute the nb_accesses (this should trigger a cache set)
-    with django_assert_num_queries(1):
-        new_nb_accesses = document.nb_accesses
+    with django_assert_num_queries(2):
+        new_nb_accesses = getattr(document, field)
     assert new_nb_accesses == 0
-    assert cache.get(key) == 0  # Cache should now contain the new value
+    assert cache.get(key) == (0, 0)  # Cache should now contain the new value
+
+
+@pytest.mark.parametrize("field", ["nb_accesses_ancestors", "nb_accesses_direct"])
+def test_models_documents_nb_accesses_cache_is_invalidated_on_document_soft_delete_restore(
+    field,
+    django_assert_num_queries,
+):
+    """Test that the cache is invalidated when a document access is deleted."""
+    document = factories.DocumentFactory()
+    key = f"document_{document.id!s}_nb_accesses"
+    factories.UserDocumentAccessFactory(document=document)
+
+    # Initially, the nb_accesses should be cached
+    assert getattr(document, field) == 1
+    assert cache.get(key) == (1, 1)
+
+    # Soft delete the document and check if cache is invalidated
+    document.soft_delete()
+    assert cache.get(key) is None  # Cache should be invalidated
+
+    # Recompute the nb_accesses (this should trigger a cache set)
+    with django_assert_num_queries(2):
+        new_nb_accesses = getattr(document, field)
+    assert new_nb_accesses == (1 if field == "nb_accesses_direct" else 0)
+    assert cache.get(key) == (1, 0)  # Cache should now contain the new value
+
+    document.restore()
+
+    # Recompute the nb_accesses (this should trigger a cache set)
+    with django_assert_num_queries(2):
+        new_nb_accesses = getattr(document, field)
+    assert new_nb_accesses == 1
+    assert cache.get(key) == (1, 1)  # Cache should now contain the new value
+
+
+def test_models_documents_numchild_deleted_from_instance():
+    """the "numchild" field should not include documents deleted from the instance."""
+    document = factories.DocumentFactory()
+    child1, _child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    assert document.numchild == 2
+
+    child1.delete()
+
+    document.refresh_from_db()
+    assert document.numchild == 1
+
+
+def test_models_documents_numchild_deleted_from_queryset():
+    """the "numchild" field should not include documents deleted from a queryset."""
+    document = factories.DocumentFactory()
+    child1, _child2 = factories.DocumentFactory.create_batch(2, parent=document)
+    assert document.numchild == 2
+
+    models.Document.objects.filter(pk=child1.pk).delete()
+
+    document.refresh_from_db()
+    assert document.numchild == 1
+
+
+def test_models_documents_numchild_soft_deleted_and_restore():
+    """the "numchild" field should not include soft deleted documents."""
+    document = factories.DocumentFactory()
+    child1, _child2 = factories.DocumentFactory.create_batch(2, parent=document)
+
+    assert document.numchild == 2
+
+    child1.soft_delete()
+
+    document.refresh_from_db()
+    assert document.numchild == 1
+
+    child1.restore()
+
+    document.refresh_from_db()
+    assert document.numchild == 2
+
+
+def test_models_documents_soft_delete_tempering_with_instance():
+    """
+    Soft deleting should fail if the document is already deleted in database even though the
+    instance "deleted_at" attributes where tempered with.
+    """
+    document = factories.DocumentFactory()
+    document.soft_delete()
+
+    document.deleted_at = None
+    document.ancestors_deleted_at = None
+    with pytest.raises(
+        RuntimeError, match="This document is already deleted or has deleted ancestors."
+    ):
+        document.soft_delete()
+
+
+def test_models_documents_restore_tempering_with_instance():
+    """
+    Soft deleting should fail if the document is already deleted in database even though the
+    instance "deleted_at" attributes where tempered with.
+    """
+    document = factories.DocumentFactory()
+
+    if random.choice([False, True]):
+        document.deleted_at = timezone.now()
+    else:
+        document.ancestors_deleted_at = timezone.now()
+
+    with pytest.raises(RuntimeError, match="This document is not deleted."):
+        document.restore()
+
+
+@pytest.mark.parametrize(
+    "ancestors_links, select_options",
+    [
+        # One ancestor
+        (
+            [{"link_reach": "public", "link_role": "reader"}],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        ([{"link_reach": "public", "link_role": "editor"}], {"public": ["editor"]}),
+        (
+            [{"link_reach": "authenticated", "link_role": "reader"}],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        (
+            [{"link_reach": "authenticated", "link_role": "editor"}],
+            {"authenticated": ["editor"], "public": ["reader", "editor"]},
+        ),
+        (
+            [{"link_reach": "restricted", "link_role": "reader"}],
+            {
+                "restricted": ["reader", "editor"],
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        (
+            [{"link_reach": "restricted", "link_role": "editor"}],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        # Multiple ancestors with different roles
+        (
+            [
+                {"link_reach": "public", "link_role": "reader"},
+                {"link_reach": "public", "link_role": "editor"},
+            ],
+            {"public": ["editor"]},
+        ),
+        (
+            [
+                {"link_reach": "authenticated", "link_role": "reader"},
+                {"link_reach": "authenticated", "link_role": "editor"},
+            ],
+            {"authenticated": ["editor"], "public": ["reader", "editor"]},
+        ),
+        (
+            [
+                {"link_reach": "restricted", "link_role": "reader"},
+                {"link_reach": "restricted", "link_role": "editor"},
+            ],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        # Multiple ancestors with different reaches
+        (
+            [
+                {"link_reach": "authenticated", "link_role": "reader"},
+                {"link_reach": "public", "link_role": "reader"},
+            ],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        (
+            [
+                {"link_reach": "restricted", "link_role": "reader"},
+                {"link_reach": "authenticated", "link_role": "reader"},
+                {"link_reach": "public", "link_role": "reader"},
+            ],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        # Multiple ancestors with mixed reaches and roles
+        (
+            [
+                {"link_reach": "authenticated", "link_role": "editor"},
+                {"link_reach": "public", "link_role": "reader"},
+            ],
+            {"authenticated": ["editor"], "public": ["reader", "editor"]},
+        ),
+        (
+            [
+                {"link_reach": "authenticated", "link_role": "reader"},
+                {"link_reach": "public", "link_role": "editor"},
+            ],
+            {"public": ["editor"]},
+        ),
+        (
+            [
+                {"link_reach": "restricted", "link_role": "editor"},
+                {"link_reach": "authenticated", "link_role": "reader"},
+            ],
+            {
+                "restricted": ["editor"],
+                "authenticated": ["reader", "editor"],
+                "public": ["reader", "editor"],
+            },
+        ),
+        (
+            [
+                {"link_reach": "restricted", "link_role": "reader"},
+                {"link_reach": "authenticated", "link_role": "editor"},
+            ],
+            {"authenticated": ["editor"], "public": ["reader", "editor"]},
+        ),
+        # No ancestors (edge case)
+        (
+            [],
+            {
+                "public": ["reader", "editor"],
+                "authenticated": ["reader", "editor"],
+                "restricted": ["reader", "editor"],
+            },
+        ),
+    ],
+)
+def test_models_documents_get_select_options(ancestors_links, select_options):
+    """Validate that the "get_select_options" method operates as expected."""
+    assert models.LinkReachChoices.get_select_options(ancestors_links) == select_options

src/backend/impress/settings.py

@@ -210,6 +210,7 @@ class Base(Configuration):
         "application/x-ms-regedit",
         "application/x-msdownload",
         "application/xml",
+        "image/svg+xml",
     ]
 
     # Document versions

src/backend/locale/de_DE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-03-03 12:20+0000\n"
-"PO-Revision-Date: 2025-03-03 12:22\n"
+"POT-Creation-Date: 2025-02-06 15:30+0000\n"
+"PO-Revision-Date: 2025-02-10 14:14\n"
 "Last-Translator: \n"
 "Language-Team: German\n"
 "Language: de_DE\n"
@@ -54,15 +54,15 @@ msgstr "Ein neues Dokument wurde in Ihrem Namen erstellt!"
 msgid "You have been granted ownership of a new document:"
 msgstr "Sie sind Besitzer eines neuen Dokuments:"
 
-#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
+#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
 msgid "Body"
 msgstr "Inhalt"
 
-#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
+#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
 msgid "Body type"
 msgstr "Typ"
 
-#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
+#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr "Benutzer"
 msgid "users"
 msgstr "Benutzer"
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
-#: core/models.py:942
+#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
+#: core/models.py:925
 msgid "title"
 msgstr "Titel"
 
@@ -251,143 +251,143 @@ msgstr "Dokumente"
 msgid "Untitled Document"
 msgstr "Unbenanntes Dokument"
 
-#: build/lib/core/models.py:734 core/models.py:734
+#: build/lib/core/models.py:719 core/models.py:719
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt!"
 
-#: build/lib/core/models.py:738 core/models.py:738
+#: build/lib/core/models.py:723 core/models.py:723
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} hat Sie mit der Rolle \"{role}\" zu folgendem Dokument eingeladen:"
 
-#: build/lib/core/models.py:741 core/models.py:741
+#: build/lib/core/models.py:726 core/models.py:726
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt: {title}"
 
-#: build/lib/core/models.py:777 core/models.py:777
+#: build/lib/core/models.py:762 core/models.py:762
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:784 core/models.py:784
+#: build/lib/core/models.py:769 core/models.py:769
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:837 core/models.py:837
+#: build/lib/core/models.py:820 core/models.py:820
 msgid "Document/user link trace"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:838 core/models.py:838
+#: build/lib/core/models.py:821 core/models.py:821
 msgid "Document/user link traces"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:844 core/models.py:844
+#: build/lib/core/models.py:827 core/models.py:827
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:867 core/models.py:867
+#: build/lib/core/models.py:850 core/models.py:850
 msgid "Document favorite"
 msgstr "Dokumentenfavorit"
 
-#: build/lib/core/models.py:868 core/models.py:868
+#: build/lib/core/models.py:851 core/models.py:851
 msgid "Document favorites"
 msgstr "Dokumentfavoriten"
 
-#: build/lib/core/models.py:874 core/models.py:874
+#: build/lib/core/models.py:857 core/models.py:857
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dieses Dokument ist bereits durch den gleichen Benutzer favorisiert worden."
 
-#: build/lib/core/models.py:896 core/models.py:896
+#: build/lib/core/models.py:879 core/models.py:879
 msgid "Document/user relation"
 msgstr "Dokument/Benutzerbeziehung"
 
-#: build/lib/core/models.py:897 core/models.py:897
+#: build/lib/core/models.py:880 core/models.py:880
 msgid "Document/user relations"
 msgstr "Dokument/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:903 core/models.py:903
+#: build/lib/core/models.py:886 core/models.py:886
 msgid "This user is already in this document."
 msgstr "Dieser Benutzer befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:909 core/models.py:909
+#: build/lib/core/models.py:892 core/models.py:892
 msgid "This team is already in this document."
 msgstr "Dieses Team befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:915 build/lib/core/models.py:1029
-#: core/models.py:915 core/models.py:1029
+#: build/lib/core/models.py:898 build/lib/core/models.py:1012
+#: core/models.py:898 core/models.py:1012
 msgid "Either user or team must be set, not both."
 msgstr "Benutzer oder Team müssen gesetzt werden, nicht beides."
 
-#: build/lib/core/models.py:943 core/models.py:943
+#: build/lib/core/models.py:926 core/models.py:926
 msgid "description"
 msgstr "Beschreibung"
 
-#: build/lib/core/models.py:944 core/models.py:944
+#: build/lib/core/models.py:927 core/models.py:927
 msgid "code"
 msgstr "Code"
 
-#: build/lib/core/models.py:945 core/models.py:945
+#: build/lib/core/models.py:928 core/models.py:928
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:947 core/models.py:947
+#: build/lib/core/models.py:930 core/models.py:930
 msgid "public"
 msgstr "öffentlich"
 
-#: build/lib/core/models.py:949 core/models.py:949
+#: build/lib/core/models.py:932 core/models.py:932
 msgid "Whether this template is public for anyone to use."
 msgstr "Ob diese Vorlage für jedermann öffentlich ist."
 
-#: build/lib/core/models.py:955 core/models.py:955
+#: build/lib/core/models.py:938 core/models.py:938
 msgid "Template"
 msgstr "Vorlage"
 
-#: build/lib/core/models.py:956 core/models.py:956
+#: build/lib/core/models.py:939 core/models.py:939
 msgid "Templates"
 msgstr "Vorlagen"
 
-#: build/lib/core/models.py:1010 core/models.py:1010
+#: build/lib/core/models.py:993 core/models.py:993
 msgid "Template/user relation"
 msgstr "Vorlage/Benutzer-Beziehung"
 
-#: build/lib/core/models.py:1011 core/models.py:1011
+#: build/lib/core/models.py:994 core/models.py:994
 msgid "Template/user relations"
 msgstr "Vorlage/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1017 core/models.py:1017
+#: build/lib/core/models.py:1000 core/models.py:1000
 msgid "This user is already in this template."
 msgstr "Dieser Benutzer ist bereits in dieser Vorlage."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1006 core/models.py:1006
 msgid "This team is already in this template."
 msgstr "Dieses Team ist bereits in diesem Template."
 
-#: build/lib/core/models.py:1046 core/models.py:1046
+#: build/lib/core/models.py:1029 core/models.py:1029
 msgid "email address"
 msgstr "E-Mail-Adresse"
 
-#: build/lib/core/models.py:1065 core/models.py:1065
+#: build/lib/core/models.py:1048 core/models.py:1048
 msgid "Document invitation"
 msgstr "Einladung zum Dokument"
 
-#: build/lib/core/models.py:1066 core/models.py:1066
+#: build/lib/core/models.py:1049 core/models.py:1049
 msgid "Document invitations"
 msgstr "Dokumenteinladungen"
 
-#: build/lib/core/models.py:1086 core/models.py:1086
+#: build/lib/core/models.py:1069 core/models.py:1069
 msgid "This email is already associated to a registered user."
 msgstr "Diese E-Mail ist bereits einem registrierten Benutzer zugeordnet."
 
-#: build/lib/impress/settings.py:235 impress/settings.py:235
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "English"
 msgstr "Englisch"
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "French"
 msgstr "Französisch"
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:238 impress/settings.py:238
 msgid "German"
 msgstr "Deutsch"
 

src/backend/locale/en_US/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-03-03 12:20+0000\n"
-"PO-Revision-Date: 2025-03-03 12:22\n"
+"POT-Creation-Date: 2025-02-06 15:30+0000\n"
+"PO-Revision-Date: 2025-02-10 14:14\n"
 "Last-Translator: \n"
 "Language-Team: English\n"
 "Language: en_US\n"
@@ -54,15 +54,15 @@ msgstr ""
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
+#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
+#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
+#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
-#: core/models.py:942
+#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
+#: core/models.py:925
 msgid "title"
 msgstr ""
 
@@ -251,143 +251,143 @@ msgstr ""
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:734 core/models.py:734
+#: build/lib/core/models.py:719 core/models.py:719
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:738 core/models.py:738
+#: build/lib/core/models.py:723 core/models.py:723
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:741 core/models.py:741
+#: build/lib/core/models.py:726 core/models.py:726
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:777 core/models.py:777
+#: build/lib/core/models.py:762 core/models.py:762
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:784 core/models.py:784
+#: build/lib/core/models.py:769 core/models.py:769
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:837 core/models.py:837
+#: build/lib/core/models.py:820 core/models.py:820
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:838 core/models.py:838
+#: build/lib/core/models.py:821 core/models.py:821
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:844 core/models.py:844
+#: build/lib/core/models.py:827 core/models.py:827
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:867 core/models.py:867
+#: build/lib/core/models.py:850 core/models.py:850
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:868 core/models.py:868
+#: build/lib/core/models.py:851 core/models.py:851
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:874 core/models.py:874
+#: build/lib/core/models.py:857 core/models.py:857
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:896 core/models.py:896
+#: build/lib/core/models.py:879 core/models.py:879
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:897 core/models.py:897
+#: build/lib/core/models.py:880 core/models.py:880
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:903 core/models.py:903
+#: build/lib/core/models.py:886 core/models.py:886
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:909 core/models.py:909
+#: build/lib/core/models.py:892 core/models.py:892
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:915 build/lib/core/models.py:1029
-#: core/models.py:915 core/models.py:1029
+#: build/lib/core/models.py:898 build/lib/core/models.py:1012
+#: core/models.py:898 core/models.py:1012
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:943 core/models.py:943
+#: build/lib/core/models.py:926 core/models.py:926
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:944 core/models.py:944
+#: build/lib/core/models.py:927 core/models.py:927
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:945 core/models.py:945
+#: build/lib/core/models.py:928 core/models.py:928
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:947 core/models.py:947
+#: build/lib/core/models.py:930 core/models.py:930
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:949 core/models.py:949
+#: build/lib/core/models.py:932 core/models.py:932
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:955 core/models.py:955
+#: build/lib/core/models.py:938 core/models.py:938
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:956 core/models.py:956
+#: build/lib/core/models.py:939 core/models.py:939
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1010 core/models.py:1010
+#: build/lib/core/models.py:993 core/models.py:993
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1011 core/models.py:1011
+#: build/lib/core/models.py:994 core/models.py:994
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1017 core/models.py:1017
+#: build/lib/core/models.py:1000 core/models.py:1000
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1006 core/models.py:1006
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1046 core/models.py:1046
+#: build/lib/core/models.py:1029 core/models.py:1029
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1065 core/models.py:1065
+#: build/lib/core/models.py:1048 core/models.py:1048
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1066 core/models.py:1066
+#: build/lib/core/models.py:1049 core/models.py:1049
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1086 core/models.py:1086
+#: build/lib/core/models.py:1069 core/models.py:1069
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:235 impress/settings.py:235
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:238 impress/settings.py:238
 msgid "German"
 msgstr ""
 

src/backend/locale/fr_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-03-03 12:20+0000\n"
-"PO-Revision-Date: 2025-03-04 08:20\n"
+"POT-Creation-Date: 2025-02-06 15:30+0000\n"
+"PO-Revision-Date: 2025-02-10 14:14\n"
 "Last-Translator: \n"
 "Language-Team: French\n"
 "Language: fr_FR\n"
@@ -54,15 +54,15 @@ msgstr "Un nouveau document a été créé pour vous !"
 msgid "You have been granted ownership of a new document:"
 msgstr "Vous avez été déclaré propriétaire d'un nouveau document :"
 
-#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
+#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
+#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
+#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
-#: core/models.py:942
+#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
+#: core/models.py:925
 msgid "title"
 msgstr ""
 
@@ -249,145 +249,145 @@ msgstr ""
 
 #: build/lib/core/models.py:418 core/models.py:418
 msgid "Untitled Document"
-msgstr "Document sans titre"
+msgstr ""
 
-#: build/lib/core/models.py:734 core/models.py:734
+#: build/lib/core/models.py:719 core/models.py:719
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} a partagé un document avec vous!"
 
-#: build/lib/core/models.py:738 core/models.py:738
+#: build/lib/core/models.py:723 core/models.py:723
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vous a invité avec le rôle \"{role}\" sur le document suivant:"
 
-#: build/lib/core/models.py:741 core/models.py:741
+#: build/lib/core/models.py:726 core/models.py:726
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} a partagé un document avec vous: {title}"
 
-#: build/lib/core/models.py:777 core/models.py:777
+#: build/lib/core/models.py:762 core/models.py:762
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:784 core/models.py:784
+#: build/lib/core/models.py:769 core/models.py:769
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:837 core/models.py:837
+#: build/lib/core/models.py:820 core/models.py:820
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:838 core/models.py:838
+#: build/lib/core/models.py:821 core/models.py:821
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:844 core/models.py:844
+#: build/lib/core/models.py:827 core/models.py:827
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:867 core/models.py:867
+#: build/lib/core/models.py:850 core/models.py:850
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:868 core/models.py:868
+#: build/lib/core/models.py:851 core/models.py:851
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:874 core/models.py:874
+#: build/lib/core/models.py:857 core/models.py:857
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:896 core/models.py:896
+#: build/lib/core/models.py:879 core/models.py:879
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:897 core/models.py:897
+#: build/lib/core/models.py:880 core/models.py:880
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:903 core/models.py:903
+#: build/lib/core/models.py:886 core/models.py:886
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:909 core/models.py:909
+#: build/lib/core/models.py:892 core/models.py:892
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:915 build/lib/core/models.py:1029
-#: core/models.py:915 core/models.py:1029
+#: build/lib/core/models.py:898 build/lib/core/models.py:1012
+#: core/models.py:898 core/models.py:1012
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:943 core/models.py:943
+#: build/lib/core/models.py:926 core/models.py:926
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:944 core/models.py:944
+#: build/lib/core/models.py:927 core/models.py:927
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:945 core/models.py:945
+#: build/lib/core/models.py:928 core/models.py:928
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:947 core/models.py:947
+#: build/lib/core/models.py:930 core/models.py:930
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:949 core/models.py:949
+#: build/lib/core/models.py:932 core/models.py:932
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:955 core/models.py:955
+#: build/lib/core/models.py:938 core/models.py:938
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:956 core/models.py:956
+#: build/lib/core/models.py:939 core/models.py:939
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1010 core/models.py:1010
+#: build/lib/core/models.py:993 core/models.py:993
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1011 core/models.py:1011
+#: build/lib/core/models.py:994 core/models.py:994
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1017 core/models.py:1017
+#: build/lib/core/models.py:1000 core/models.py:1000
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1006 core/models.py:1006
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1046 core/models.py:1046
+#: build/lib/core/models.py:1029 core/models.py:1029
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1065 core/models.py:1065
+#: build/lib/core/models.py:1048 core/models.py:1048
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1066 core/models.py:1066
+#: build/lib/core/models.py:1049 core/models.py:1049
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1086 core/models.py:1086
+#: build/lib/core/models.py:1069 core/models.py:1069
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:235 impress/settings.py:235
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:238 impress/settings.py:238
 msgid "German"
 msgstr ""
 

src/backend/locale/nl_NL/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-03-03 12:20+0000\n"
-"PO-Revision-Date: 2025-03-03 12:22\n"
+"POT-Creation-Date: 2025-02-06 15:30+0000\n"
+"PO-Revision-Date: 2025-02-10 14:14\n"
 "Last-Translator: \n"
 "Language-Team: Dutch\n"
 "Language: nl_NL\n"
@@ -54,15 +54,15 @@ msgstr ""
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:455 core/api/serializers.py:455
+#: build/lib/core/api/serializers.py:453 core/api/serializers.py:453
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:458 core/api/serializers.py:458
+#: build/lib/core/api/serializers.py:456 core/api/serializers.py:456
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:464 core/api/serializers.py:464
+#: build/lib/core/api/serializers.py:462 core/api/serializers.py:462
 msgid "Format"
 msgstr ""
 
@@ -230,8 +230,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:373 build/lib/core/models.py:942 core/models.py:373
-#: core/models.py:942
+#: build/lib/core/models.py:373 build/lib/core/models.py:925 core/models.py:373
+#: core/models.py:925
 msgid "title"
 msgstr ""
 
@@ -251,143 +251,143 @@ msgstr ""
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:734 core/models.py:734
+#: build/lib/core/models.py:719 core/models.py:719
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:738 core/models.py:738
+#: build/lib/core/models.py:723 core/models.py:723
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:741 core/models.py:741
+#: build/lib/core/models.py:726 core/models.py:726
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:777 core/models.py:777
+#: build/lib/core/models.py:762 core/models.py:762
 msgid "This document is not deleted."
 msgstr ""
 
-#: build/lib/core/models.py:784 core/models.py:784
+#: build/lib/core/models.py:769 core/models.py:769
 msgid "This document was permanently deleted and cannot be restored."
 msgstr ""
 
-#: build/lib/core/models.py:837 core/models.py:837
+#: build/lib/core/models.py:820 core/models.py:820
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:838 core/models.py:838
+#: build/lib/core/models.py:821 core/models.py:821
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:844 core/models.py:844
+#: build/lib/core/models.py:827 core/models.py:827
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:867 core/models.py:867
+#: build/lib/core/models.py:850 core/models.py:850
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:868 core/models.py:868
+#: build/lib/core/models.py:851 core/models.py:851
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:874 core/models.py:874
+#: build/lib/core/models.py:857 core/models.py:857
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:896 core/models.py:896
+#: build/lib/core/models.py:879 core/models.py:879
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:897 core/models.py:897
+#: build/lib/core/models.py:880 core/models.py:880
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:903 core/models.py:903
+#: build/lib/core/models.py:886 core/models.py:886
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:909 core/models.py:909
+#: build/lib/core/models.py:892 core/models.py:892
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:915 build/lib/core/models.py:1029
-#: core/models.py:915 core/models.py:1029
+#: build/lib/core/models.py:898 build/lib/core/models.py:1012
+#: core/models.py:898 core/models.py:1012
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:943 core/models.py:943
+#: build/lib/core/models.py:926 core/models.py:926
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:944 core/models.py:944
+#: build/lib/core/models.py:927 core/models.py:927
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:945 core/models.py:945
+#: build/lib/core/models.py:928 core/models.py:928
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:947 core/models.py:947
+#: build/lib/core/models.py:930 core/models.py:930
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:949 core/models.py:949
+#: build/lib/core/models.py:932 core/models.py:932
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:955 core/models.py:955
+#: build/lib/core/models.py:938 core/models.py:938
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:956 core/models.py:956
+#: build/lib/core/models.py:939 core/models.py:939
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1010 core/models.py:1010
+#: build/lib/core/models.py:993 core/models.py:993
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1011 core/models.py:1011
+#: build/lib/core/models.py:994 core/models.py:994
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1017 core/models.py:1017
+#: build/lib/core/models.py:1000 core/models.py:1000
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1006 core/models.py:1006
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1046 core/models.py:1046
+#: build/lib/core/models.py:1029 core/models.py:1029
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1065 core/models.py:1065
+#: build/lib/core/models.py:1048 core/models.py:1048
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1066 core/models.py:1066
+#: build/lib/core/models.py:1049 core/models.py:1049
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1086 core/models.py:1086
+#: build/lib/core/models.py:1069 core/models.py:1069
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: build/lib/impress/settings.py:235 impress/settings.py:235
+#: build/lib/impress/settings.py:236 impress/settings.py:236
 msgid "English"
 msgstr ""
 
-#: build/lib/impress/settings.py:236 impress/settings.py:236
+#: build/lib/impress/settings.py:237 impress/settings.py:237
 msgid "French"
 msgstr ""
 
-#: build/lib/impress/settings.py:237 impress/settings.py:237
+#: build/lib/impress/settings.py:238 impress/settings.py:238
 msgid "German"
 msgstr ""
 

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "impress"
-version = "2.3.0"
+version = "2.2.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",

src/frontend/apps/e2e/__tests__/app-impress/assets/test.html

@@ -1,22 +0,0 @@
-<html>
-  <head>
-    <title>Test unsafe file</title>
-  </head>
-  <body>
-    <h1>Hello svg</h1>
-    <img src="test.jpg" alt="test" />
-    <svg
-      xmlns="http://www.w3.org/2000/svg"
-      width="100"
-      height="100"
-      viewBox="0 0 100 100"
-    >
-      <circle cx="50" cy="30" r="20" fill="#3498db" />
-      <polygon
-        points="50,10 55,20 65,20 58,30 60,40 50,35 40,40 42,30 35,20 45,20"
-        fill="#f1c40f"
-      />
-      <text x="50" y="70" text-anchor="middle" fill="white">Hello svg</text>
-    </svg>
-  </body>
-</html>

src/frontend/apps/e2e/__tests__/app-impress/doc-editor.spec.ts

@@ -1,7 +1,8 @@
+/* eslint-disable playwright/no-conditional-expect */
+/* eslint-disable playwright/no-conditional-in-test */
 import path from 'path';
 
 import { expect, test } from '@playwright/test';
-import cs from 'convert-stream';
 
 import {
   createDoc,
@@ -414,8 +415,6 @@ test.describe('Doc Editor', () => {
       const editor = page.locator('.ProseMirror');
       await editor.getByText('Hello').dblclick();
 
-      /* eslint-disable playwright/no-conditional-expect */
-      /* eslint-disable playwright/no-conditional-in-test */
       if (!ai_transform && !ai_translate) {
         await expect(page.getByRole('button', { name: 'AI' })).toBeHidden();
         return;
@@ -442,45 +441,6 @@ test.describe('Doc Editor', () => {
           page.getByRole('menuitem', { name: 'Language' }),
         ).toBeHidden();
       }
-      /* eslint-enable playwright/no-conditional-expect */
-      /* eslint-enable playwright/no-conditional-in-test */
     });
   });
-
-  test('it downloads unsafe files', async ({ page, browserName }) => {
-    const [randomDoc] = await createDoc(page, 'doc-editor', browserName, 1);
-
-    const fileChooserPromise = page.waitForEvent('filechooser');
-    const downloadPromise = page.waitForEvent('download', (download) => {
-      return download.suggestedFilename().includes(`html`);
-    });
-
-    await verifyDocName(page, randomDoc);
-
-    await page.locator('.ProseMirror.bn-editor').click();
-    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
-
-    await page.keyboard.press('Enter');
-    await page.locator('.bn-block-outer').last().fill('/');
-    await page.getByText('Embedded file').click();
-    await page.getByText('Upload file').click();
-
-    const fileChooser = await fileChooserPromise;
-    await fileChooser.setFiles(path.join(__dirname, 'assets/test.html'));
-
-    await page.locator('.bn-block-content[data-name="test.html"]').click();
-    await page.getByRole('button', { name: 'Download file' }).click();
-
-    await expect(
-      page.getByText('This file is flagged as unsafe.'),
-    ).toBeVisible();
-
-    await page.getByRole('button', { name: 'Download' }).click();
-
-    const download = await downloadPromise;
-    expect(download.suggestedFilename()).toContain(`-unsafe.html`);
-
-    const svgBuffer = await cs.toBuffer(await download.createReadStream());
-    expect(svgBuffer.toString()).toContain('Hello svg');
-  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-export.spec.ts

@@ -197,49 +197,4 @@ test.describe('Doc Export', () => {
 
     expect(pdfText).toContain('Hello World');
   });
-
-  test('it exports the doc with quotes', async ({ page, browserName }) => {
-    const [randomDoc] = await createDoc(page, 'export-quotes', browserName, 1);
-
-    const downloadPromise = page.waitForEvent('download', (download) => {
-      return download.suggestedFilename().includes(`${randomDoc}.pdf`);
-    });
-
-    const editor = page.locator('.ProseMirror');
-    // Trigger slash menu to show menu
-    await editor.click();
-    await editor.fill('/');
-    await page.getByText('Add a quote block').click();
-
-    await expect(
-      editor.locator('.bn-block-content[data-content-type="quote"]'),
-    ).toBeVisible();
-
-    await editor.fill('Hello World');
-
-    await expect(editor.getByText('Hello World')).toHaveCSS(
-      'font-style',
-      'italic',
-    );
-
-    await page
-      .getByRole('button', {
-        name: 'download',
-      })
-      .click();
-
-    await page
-      .getByRole('button', {
-        name: 'Download',
-      })
-      .click();
-
-    const download = await downloadPromise;
-    expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
-
-    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
-    const pdfData = await pdf(pdfBuffer);
-
-    expect(pdfData.text).toContain('Hello World'); // This is the pdf text
-  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-header.spec.ts

@@ -99,7 +99,9 @@ test.describe('Doc Header', () => {
     ).toBeVisible();
 
     await expect(
-      page.getByText(`Are you sure you want to delete this document ?`),
+      page.getByText(
+        `Are you sure you want to delete the document "${randomDoc}"?`,
+      ),
     ).toBeVisible();
 
     await page

src/frontend/apps/e2e/__tests__/app-impress/home.spec.ts

@@ -26,7 +26,6 @@ test.describe('Home page', () => {
 
     // Check the titles
     const h2 = page.locator('h2');
-    await expect(h2.getByText('Govs ❤️ Open Source.')).toBeVisible();
     await expect(
       h2.getByText('Collaborative writing, Simplified.'),
     ).toBeVisible();

src/frontend/apps/e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-e2e",
-  "version": "2.3.0",
+  "version": "2.2.0",
   "private": true,
   "scripts": {
     "lint": "eslint . --ext .ts",

src/frontend/apps/impress/cunningham.ts

@@ -1,3 +1,4 @@
+
 const config = {
   themes: {
     default: {
@@ -357,15 +358,6 @@ const config = {
       components: {
         alert: {
           'border-radius': '0',
-          error: {
-            'background-color': 'var(--c--theme--colors--danger-100)',
-            'border-left-color': 'var(--c--theme--colors--danger-400)',
-            close: {
-              color: 'white',
-              'background-color': 'var(--c--theme--colors--danger-400)',
-              'background-color-hover': 'var(--c--theme--colors--danger-600)',
-            },
-          },
         },
         modal: {
           'width-small': '342px',

src/frontend/apps/impress/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-impress",
-  "version": "2.3.0",
+  "version": "2.2.0",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -21,12 +21,14 @@
     "@blocknote/react": "0.23.2",
     "@blocknote/xl-docx-exporter": "0.23.2",
     "@blocknote/xl-pdf-exporter": "0.23.2",
+    "@fontsource/material-icons": "^5.1.1",
     "@gouvfr-lasuite/integration": "1.0.2",
     "@hocuspocus/provider": "2.15.2",
     "@openfun/cunningham-react": "2.9.4",
     "@react-pdf/renderer": "4.1.6",
     "@sentry/nextjs": "8.54.0",
     "@tanstack/react-query": "5.66.0",
+    "clsx": "2.1.1",
     "cmdk": "1.0.4",
     "crisp-sdk-web": "1.0.25",
     "docx": "9.1.1",
@@ -38,11 +40,14 @@
     "next": "15.1.6",
     "posthog-js": "1.215.6",
     "react": "*",
+    "react-arborist": "3.4.0",
     "react-aria-components": "1.6.0",
     "react-dom": "*",
     "react-i18next": "15.4.0",
     "react-intersection-observer": "9.15.1",
+    "react-resizable-panels": "^2.1.7",
     "react-select": "5.10.0",
+    "sass": "1.83.4",
     "styled-components": "6.1.15",
     "use-debounce": "10.0.4",
     "y-protocols": "1.0.6",
@@ -74,6 +79,7 @@
     "stylelint-config-standard": "37.0.0",
     "stylelint-prettier": "5.0.3",
     "typescript": "*",
+    "use-resize-observer": "9.1.0",
     "webpack": "5.97.1",
     "workbox-webpack-plugin": "7.1.0"
   }

src/frontend/apps/impress/src/components/DropButton.tsx

@@ -64,11 +64,22 @@ export const DropButton = ({
     onOpenChange?.(isOpen);
   };
 
+  const props = {
+    onClick: (e: React.MouseEvent<HTMLButtonElement>) => {
+      e.stopPropagation();
+      e.preventDefault();
+      onOpenChangeHandler(!isLocalOpen);
+    },
+  };
+
   return (
     <>
       <StyledButton
+        // {...props}
         ref={triggerRef}
-        onPress={() => onOpenChangeHandler(true)}
+        onPress={(e) => {
+          onOpenChangeHandler(!isLocalOpen);
+        }}
         aria-label={label}
         $css={buttonCss}
       >

src/frontend/apps/impress/src/components/DropdownMenu.tsx

@@ -8,6 +8,7 @@ export type DropdownMenuOption = {
   icon?: string;
   label: string;
   testId?: string;
+  value?: string;
   callback?: () => void | Promise<unknown>;
   danger?: boolean;
   isSelected?: boolean;
@@ -23,6 +24,8 @@ export type DropdownMenuProps = {
   buttonCss?: BoxProps['$css'];
   disabled?: boolean;
   topMessage?: string;
+  selectedValues?: string[];
+  afterOpenChange?: (isOpen: boolean) => void;
 };
 
 export const DropdownMenu = ({
@@ -34,6 +37,8 @@ export const DropdownMenu = ({
   buttonCss,
   label,
   topMessage,
+  afterOpenChange,
+  selectedValues,
 }: PropsWithChildren<DropdownMenuProps>) => {
   const theme = useCunninghamTheme();
   const spacings = theme.spacingsTokens();
@@ -43,6 +48,7 @@ export const DropdownMenu = ({
 
   const onOpenChange = (isOpen: boolean) => {
     setIsOpen(isOpen);
+    afterOpenChange?.(isOpen);
   };
 
   if (disabled) {
@@ -161,7 +167,8 @@ export const DropdownMenu = ({
                   {option.label}
                 </Text>
               </Box>
-              {option.isSelected && (
+              {(option.isSelected ||
+                selectedValues?.includes(option.value ?? '')) && (
                 <Icon iconName="check" $size="20px" $theme="greyscale" />
               )}
             </BoxButton>

src/frontend/apps/impress/src/components/Icon.tsx

@@ -5,10 +5,19 @@ import { useCunninghamTheme } from '@/cunningham';
 
 type IconProps = TextType & {
   iconName: string;
+  isFilled?: boolean;
 };
-export const Icon = ({ iconName, ...textProps }: IconProps) => {
+export const Icon = ({ iconName, isFilled, ...textProps }: IconProps) => {
   return (
-    <Text $isMaterialIcon {...textProps}>
+    <Text
+      $isMaterialIcon={!isFilled}
+      {...textProps}
+      className={
+        isFilled
+          ? `material-icons-filled ${textProps.className}`
+          : textProps.className
+      }
+    >
       {iconName}
     </Text>
   );

src/frontend/apps/impress/src/components/TextErrors.tsx

@@ -35,7 +35,6 @@ export const TextErrors = ({
             <Text
               key={`causes-${i}`}
               $theme="danger"
-              $variation="600"
               $textAlign="center"
               {...textProps}
             >
@@ -44,12 +43,7 @@ export const TextErrors = ({
           ))}
 
         {!causes && (
-          <Text
-            $theme="danger"
-            $variation="600"
-            $textAlign="center"
-            {...textProps}
-          >
+          <Text $theme="danger" $textAlign="center" {...textProps}>
             {defaultMessage || t('Something bad happens, please retry.')}
           </Text>
         )}

src/frontend/apps/impress/src/components/common/loader/Loader.tsx

@@ -0,0 +1,9 @@
+import styles from './loader.module.scss';
+
+interface LoaderProps {
+  size?: 'sm' | 'md' | 'lg' | 'xl';
+}
+
+export const Loader = ({ size = 'sm' }: LoaderProps) => {
+  return <div className={[styles.loader, styles[size]].join(' ')} />;
+};

src/frontend/apps/impress/src/components/common/loader/loader.module.scss

@@ -0,0 +1,40 @@
+.loader {
+  border-radius: 50%;
+  background:
+    radial-gradient(farthest-side, #cecece 94%, #0000) top/3.8px 3.8px no-repeat,
+    conic-gradient(#0000 30%, #cecece);
+  -webkit-mask: radial-gradient(
+    farthest-side,
+    #0000 calc(100% - 3.8px),
+    #000 0
+  );
+  animation: spinner-c7wet2 1s infinite linear;
+  &.sm {
+    width: 16px;
+    height: 16px;
+  }
+
+  &.md {
+    width: 24px;
+    height: 24px;
+  }
+
+  &.lg {
+    width: 32px;
+    height: 32px;
+  }
+
+  &.xl {
+    width: 40px;
+    height: 40px;
+  }
+}
+
+.spinner {
+}
+
+@keyframes spinner-c7wet2 {
+  100% {
+    transform: rotate(1turn);
+  }
+}

src/frontend/apps/impress/src/components/common/tree/TreeView.tsx

@@ -0,0 +1,352 @@
+/* eslint-disable jsx-a11y/no-static-element-interactions */
+import { clsx } from 'clsx';
+import { ReactNode, useCallback, useEffect, useRef, useState } from 'react';
+import {
+  CursorProps,
+  MoveHandler,
+  NodeApi,
+  NodeRendererProps,
+  Tree,
+} from 'react-arborist';
+import { OpenMap } from 'react-arborist/dist/module/state/open-slice';
+
+import {
+  BaseType,
+  TreeViewDataType,
+  TreeViewMoveModeEnum,
+  TreeViewMoveResult,
+} from '@/features/docs/doc-tree/types/tree';
+
+import { Box } from '../../Box';
+import { Icon } from '../../Icon';
+import { Loader } from '../loader/Loader';
+
+import styles from './treeview.module.scss';
+
+export type TreeViewProps<T> = {
+  treeData: TreeViewDataType<T>[];
+  width?: number | string;
+  selectedNodeId?: string;
+  rootNodeId: string;
+  initialOpenState?: OpenMap;
+  renderNode: (
+    props: NodeRendererProps<TreeViewDataType<T>>,
+  ) => React.ReactNode;
+  afterMove?: (
+    result: TreeViewMoveResult,
+    newTreeData: TreeViewDataType<T>[],
+  ) => void;
+};
+
+export const TreeView = <T,>({
+  treeData,
+  width,
+  rootNodeId,
+  renderNode,
+  afterMove,
+  selectedNodeId,
+  initialOpenState,
+}: TreeViewProps<T>) => {
+  const onMove3 = (args: {
+    dragIds: string[];
+    dragNodes: NodeApi<BaseType<T>>[];
+    parentId: string | null;
+    parentNode: NodeApi<BaseType<T>> | null;
+    index: number;
+  }): TreeViewMoveResult | null => {
+    const newData = treeData.map((rootItem) => {
+      // eslint-disable-next-line @typescript-eslint/no-unused-vars
+      const { children, ...rest } = rootItem;
+      return rest;
+    });
+
+    const sourceNodeId = args.dragNodes[0].data.id;
+    const sourceNode = args.dragNodes[0].data;
+    const oldParentId = sourceNode.parentId ?? rootNodeId;
+    const newIndex = args.index;
+    const targetNodeId = args.parentId ?? rootNodeId;
+
+    const children = args.parentId
+      ? (args.parentNode?.children ?? [])
+      : newData;
+
+    if (newIndex === 0) {
+      return {
+        targetNodeId: targetNodeId ?? rootNodeId,
+        mode: TreeViewMoveModeEnum.FIRST_CHILD,
+        sourceNodeId,
+        oldParentId,
+      };
+    }
+    if (newIndex === children.length) {
+      return {
+        targetNodeId: targetNodeId ?? rootNodeId,
+        mode: TreeViewMoveModeEnum.LAST_CHILD,
+        sourceNodeId,
+        oldParentId,
+      };
+    }
+
+    const siblingIndex = newIndex - 1;
+    const sibling = children[siblingIndex];
+
+    if (sibling) {
+      return {
+        targetNodeId: sibling.id,
+        mode: TreeViewMoveModeEnum.RIGHT,
+        sourceNodeId,
+        oldParentId,
+      };
+    }
+
+    const nextSiblingIndex = newIndex + 1;
+    const nextSibling = children[nextSiblingIndex];
+    if (nextSibling) {
+      return {
+        targetNodeId: nextSibling.id,
+        mode: TreeViewMoveModeEnum.LEFT,
+        sourceNodeId,
+        oldParentId,
+      };
+    }
+
+    return null;
+  };
+
+  const onMove = (args: {
+    dragIds: string[];
+    dragNodes: NodeApi<BaseType<T>>[];
+    parentId: string | null;
+    parentNode: NodeApi<BaseType<T>> | null;
+    index: number;
+  }) => {
+    // Création d'une copie profonde pour éviter les mutations directes
+    const newData = JSON.parse(
+      JSON.stringify(treeData),
+    ) as TreeViewDataType<T>[];
+    const draggedId = args.dragIds[0];
+
+    // Fonction helper pour trouver et supprimer un nœud dans l'arbre
+    const findAndRemoveNode = (
+      items: TreeViewDataType<T>[],
+      parentId?: string,
+    ): {
+      currentIndex: number;
+      newIndex: number;
+      parentId?: string;
+      draggedNode: TreeViewDataType<T>;
+    } | null => {
+      items.forEach((item, index) => {
+        if (item.id === draggedId) {
+          return {
+            currentIndex: index,
+          };
+        }
+      });
+
+      for (let i = 0; i < items.length; i++) {
+        if (items[i].id === draggedId) {
+          const currentIndex = i;
+          let newIndex = args.index;
+          if (currentIndex < newIndex) {
+            newIndex -= 1;
+          }
+          return {
+            currentIndex: i,
+            parentId,
+            newIndex,
+            draggedNode: items.splice(i, 1)[0],
+          };
+        }
+        if (items[i].children?.length) {
+          const found = findAndRemoveNode(
+            items[i]?.children ?? [],
+            items[i].id,
+          );
+          if (found) {
+            return found;
+          }
+        }
+      }
+      return null;
+    };
+
+    // Trouver et supprimer le nœud déplacé
+    const r = findAndRemoveNode(newData);
+    const draggedNode = r?.draggedNode;
+    const currentIndex = r?.currentIndex ?? -1;
+    const newIndex = r?.newIndex ?? -1;
+    if (!draggedNode || currentIndex < 0 || newIndex < 0) {
+      return;
+    }
+
+    // Cas 1: Déplacement à la racine
+    if (!args.parentNode) {
+      draggedNode.parentId = rootNodeId;
+      newData.splice(newIndex, 0, draggedNode);
+    }
+    // Cas 2: Déplacement dans un dossier
+    else {
+      const targetParent = args.parentNode.data;
+      draggedNode.parentId = targetParent.id;
+      const findParentAndInsert = (items: TreeViewDataType<T>[]) => {
+        for (const item of items) {
+          if (item.id === targetParent.id) {
+            item.children = item.children || [];
+            item.children.splice(
+              r.parentId === targetParent.id ? r.newIndex : args.index,
+              0,
+              draggedNode,
+            );
+
+            return true;
+          }
+          if (item.children?.length) {
+            if (findParentAndInsert(item.children)) {
+              return true;
+            }
+          }
+        }
+        return false;
+      };
+
+      findParentAndInsert(newData);
+    }
+
+    const moveResult = onMove3(args);
+    if (moveResult) {
+      afterMove?.(moveResult, newData);
+    }
+  };
+
+  return (
+    <Tree
+      data={treeData}
+      openByDefault={false}
+      height={1000}
+      indent={20}
+      width={width}
+      initialOpenState={initialOpenState}
+      selection={selectedNodeId}
+      disableEdit={true}
+      selectionFollowsFocus={true}
+      disableMultiSelection={true}
+      rowHeight={32}
+      overscanCount={20}
+      padding={25}
+      renderCursor={Cursor}
+      onMove={onMove as MoveHandler<TreeViewDataType<T>>}
+    >
+      {(props) => renderNode(props)}
+    </Tree>
+  );
+};
+
+function Cursor({ top, left }: CursorProps) {
+  return (
+    <div
+      className={styles.cursor}
+      style={{
+        top,
+        left: left + 10,
+      }}
+    ></div>
+  );
+}
+
+export type TreeViewNodeProps<T> = NodeRendererProps<TreeViewDataType<T>> & {
+  children: ReactNode;
+  onClick?: () => void;
+  loadChildren?: (node?: TreeViewDataType<T>) => Promise<TreeViewDataType<T>[]>;
+};
+
+export const TreeViewNode = <T,>({
+  children,
+  onClick,
+  node,
+  dragHandle,
+  style,
+  loadChildren,
+}: TreeViewNodeProps<T>) => {
+  /* This node instance can do many things. See the API reference. */
+  const timeoutRef = useRef<NodeJS.Timeout | null>(null);
+  const [isLoading, setIsLoading] = useState(false);
+  const hasChildren =
+    (node.data.childrenCount !== undefined && node.data.childrenCount > 0) ||
+    (node.data.children?.length ?? 0) > 0;
+
+  const isLeaf = node.isLeaf || !hasChildren;
+
+  const hasLoadedChildren = node.children?.length ?? 0 > 0;
+
+  const handleClick = useCallback(async () => {
+    if (isLeaf) {
+      return;
+    }
+
+    if (hasLoadedChildren) {
+      node.toggle();
+      return;
+    }
+
+    setIsLoading(true);
+    await loadChildren?.(node.data);
+    setIsLoading(false);
+    node.open();
+  }, [hasLoadedChildren, loadChildren, node, isLeaf]);
+
+  useEffect(() => {
+    if (node.willReceiveDrop && !node.isOpen) {
+      timeoutRef.current = setTimeout(() => {
+        void handleClick();
+      }, 200);
+    }
+
+    if (timeoutRef.current && !node.willReceiveDrop) {
+      clearTimeout(timeoutRef.current);
+    }
+  }, [node, handleClick]);
+  return (
+    <div
+      onClick={onClick}
+      onKeyDown={onClick}
+      role="button"
+      tabIndex={0}
+      className={clsx(styles.node, {
+        [styles.willReceiveDrop]: node.willReceiveDrop,
+        [styles.selected]: node.isSelected,
+        toto: true,
+      })}
+      style={{
+        ...style,
+      }}
+      ref={dragHandle}
+    >
+      {isLeaf ? (
+        <Box $padding={{ left: '16px' }} />
+      ) : (
+        <>
+          {isLoading ? (
+            <Box>
+              <Loader />
+            </Box>
+          ) : (
+            <Icon
+              onClick={(e) => {
+                e.stopPropagation();
+                e.preventDefault();
+                void handleClick();
+              }}
+              $variation="500"
+              $size="16px"
+              iconName={
+                node.isOpen ? 'keyboard_arrow_down' : 'keyboard_arrow_right'
+              }
+            />
+          )}
+        </>
+      )}
+      {children}
+    </div>
+  );
+};

src/frontend/apps/impress/src/components/common/tree/treeStore.ts

@@ -0,0 +1,186 @@
+import { create } from 'zustand';
+
+import { Doc, getDoc } from '@/features/docs';
+import { TreeViewDataType } from '@/features/docs/doc-tree/types/tree';
+
+interface TreeStore<T> {
+  treeData: TreeViewDataType<T>[];
+  selectedNode: TreeViewDataType<T> | null;
+  rootId: string | undefined;
+  initialNode: TreeViewDataType<T> | undefined;
+  setInitialNode: (node: TreeViewDataType<T> | undefined) => void;
+  setSelectedNode: (node: TreeViewDataType<T> | null) => void;
+  setTreeData: (data: TreeViewDataType<T>[]) => void;
+  updateNode: (nodeId: string, newData: Partial<TreeViewDataType<T>>) => void;
+  addRootNode: (node: TreeViewDataType<T>) => void;
+  removeNode: (nodeId: string) => void;
+  addChildNode: (parentId: string, newNode: TreeViewDataType<T>) => void;
+  refreshNode: (nodeId: string) => void;
+  findNode: (nodeId: string) => TreeViewDataType<T> | null;
+  setRootId: (id?: string) => void;
+  reset: (
+    rootId?: string,
+    treeData?: TreeViewDataType<T>[],
+    selectedNode?: TreeViewDataType<T> | null,
+  ) => void;
+}
+
+export const createTreeStore = <T>(
+  refreshCallback?: (id: string) => Promise<Partial<TreeViewDataType<T>>>,
+) =>
+  create<TreeStore<T>>((set, get) => ({
+    treeData: [],
+    selectedNode: null,
+    rootId: undefined,
+    initialNode: undefined,
+    setSelectedNode: (node) => {
+      set({ selectedNode: node });
+    },
+    setInitialNode: (node) => {
+      set({ initialNode: node });
+    },
+    setTreeData: (data) => {
+      set({ treeData: data });
+    },
+    setRootId: (id) => {
+      set({ rootId: id });
+    },
+    refreshNode: (nodeId) => {
+      set((state) => {
+        const node = state.findNode(nodeId);
+        if (!node) {
+          return state;
+        }
+        refreshCallback?.(nodeId)
+          .then((data) => {
+            console.log('data', data);
+            state.updateNode(nodeId, { ...node, ...data });
+          })
+          .catch((error) => {
+            console.error(error);
+          });
+        return state;
+      });
+    },
+    updateNode: (nodeId, newData) => {
+      set((state) => {
+        const updateNodeInTree = (
+          nodes: TreeViewDataType<T>[],
+        ): TreeViewDataType<T>[] => {
+          return nodes.map((node) => {
+            if (node.id === nodeId) {
+              return { ...node, ...newData };
+            }
+            if (node.children) {
+              return {
+                ...node,
+                children: updateNodeInTree(node.children),
+              };
+            }
+            return node;
+          });
+        };
+
+        return {
+          treeData: updateNodeInTree(state.treeData),
+        };
+      });
+    },
+
+    addRootNode: (node) => {
+      set((state) => ({
+        treeData: [...state.treeData, node],
+      }));
+    },
+
+    removeNode: (nodeId) => {
+      set((state) => {
+        const removeNodeFromTree = (
+          nodes: TreeViewDataType<T>[],
+        ): TreeViewDataType<T>[] => {
+          const filteredNodes = nodes.filter((node) => node.id !== nodeId);
+
+          return filteredNodes.map((node) => {
+            if (node.children) {
+              const children = removeNodeFromTree(node.children);
+              return {
+                ...node,
+                children: children,
+                childrenCount: children.length,
+              };
+            }
+            return node;
+          });
+        };
+
+        return {
+          treeData: removeNodeFromTree(state.treeData),
+        };
+      });
+    },
+
+    addChildNode: (parentId, newNode) => {
+      set((state) => {
+        const addChildToNode = (
+          nodes: TreeViewDataType<T>[],
+        ): TreeViewDataType<T>[] => {
+          return nodes.map((node) => {
+            if (node.id === parentId) {
+              return {
+                ...node,
+                children: [...(node.children || []), newNode],
+              };
+            }
+            if (node.children) {
+              return {
+                ...node,
+                children: addChildToNode(node.children),
+              };
+            }
+            return node;
+          });
+        };
+
+        return {
+          treeData: addChildToNode(state.treeData),
+        };
+      });
+    },
+
+    findNode: (nodeId) => {
+      const findNodeInTree = (
+        nodes: TreeViewDataType<T>[],
+      ): TreeViewDataType<T> | null => {
+        for (const node of nodes) {
+          if (node.id === nodeId) {
+            return node;
+          }
+          if (node.children) {
+            const found = findNodeInTree(node.children);
+            if (found) {
+              return found;
+            }
+          }
+        }
+        return null;
+      };
+
+      return findNodeInTree(get().treeData);
+    },
+    reset: (rootId, treeData, selectedNode) => {
+      console.log('reset', rootId, treeData, selectedNode);
+      set({
+        treeData: treeData ?? [],
+        selectedNode: selectedNode ?? null,
+        rootId: rootId,
+        initialNode: selectedNode ?? undefined,
+      });
+    },
+  }));
+
+// Créer une instance du store
+// export const useTreeStore = createTreeStore();
+export const useTreeStore = createTreeStore<Doc>(async (docId) => {
+  const doc = await getDoc({ id: docId });
+  return { ...doc, childrenCount: doc.numchild };
+});

src/frontend/apps/impress/src/components/common/tree/treeview.module.scss

@@ -0,0 +1,46 @@
+.container {
+  [role='treeitem'] {
+    display: flex;
+    align-items: center;
+  }
+}
+
+.node {
+  width: 100%;
+  // padding-left: 0px !important;
+  // margin-left: 180px;
+  // min-width: 300px;
+  height: calc(100% - 2px);
+  overflow: hidden;
+  display: flex;
+  align-items: center;
+  flex-wrap: nowrap;
+  border-radius: 4px;
+  border: 1.5px solid rgba(0, 0, 0, 0);
+  cursor: pointer;
+
+  padding: var(--c--theme--spacings--4xs) 0;
+  gap: var(--c--theme--spacings--3xs);
+
+  &:not(.willReceiveDrop, .selected):hover {
+    background-color: var(--c--theme--colors--greyscale-100);
+  }
+
+  &.selected {
+    background-color: var(--c--theme--colors--greyscale-100);
+
+    font-weight: 700;
+  }
+
+  &.willReceiveDrop {
+    background-color: var(--c--theme--colors--primary-100);
+    border: 1.5px solid var(--c--theme--colors--primary-500);
+  }
+}
+
+.cursor {
+  position: absolute;
+  width: 100%;
+  height: 0;
+  border-top: 2px solid var(--c--theme--colors--primary-500);
+}

src/frontend/apps/impress/src/components/filter/FilterDropdown.tsx

@@ -0,0 +1,63 @@
+import { css } from 'styled-components';
+
+import { Box } from '../Box';
+import { DropdownMenu, DropdownMenuOption } from '../DropdownMenu';
+import { Icon } from '../Icon';
+import { Text } from '../Text';
+
+export type FilterDropdownProps = {
+  options: DropdownMenuOption[];
+  selectedValue?: string;
+};
+
+export const FilterDropdown = ({
+  options,
+  selectedValue,
+}: FilterDropdownProps) => {
+  const selectedOption = options.find(
+    (option) => option.value === selectedValue,
+  );
+
+  if (options.length === 0) {
+    return null;
+  }
+
+  return (
+    <DropdownMenu
+      selectedValues={selectedValue ? [selectedValue] : undefined}
+      options={options}
+    >
+      <Box
+        $css={css`
+          border: 1px solid
+            ${selectedOption
+              ? 'var(--c--theme--colors--primary-500)'
+              : 'var(--c--theme--colors--greyscale-250)'};
+          border-radius: 4px;
+          background-color: ${selectedOption
+            ? 'var(--c--theme--colors--primary-100)'
+            : 'var(--c--theme--colors--greyscale-000)'};
+          gap: var(--c--theme--spacings--2xs);
+          padding: var(--c--theme--spacings--2xs) var(--c--theme--spacings--xs);
+        `}
+        color="secondary"
+        $direction="row"
+        $align="center"
+      >
+        <Text
+          $weight={400}
+          $variation={selectedOption ? '800' : '600'}
+          $theme={selectedOption ? 'primary' : 'greyscale'}
+        >
+          {selectedOption?.label ?? options[0].label}
+        </Text>
+        <Icon
+          $size="16px"
+          iconName="keyboard_arrow_down"
+          $variation={selectedOption ? '800' : '600'}
+          $theme={selectedOption ? 'primary' : 'greyscale'}
+        />
+      </Box>
+    </DropdownMenu>
+  );
+};

src/frontend/apps/impress/src/components/quick-search/QuickSearch.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable jsx-a11y/no-static-element-interactions */
 import { Command } from 'cmdk';
 import { ReactNode, useRef } from 'react';
 
@@ -48,7 +49,12 @@ export const QuickSearch = ({
   return (
     <>
       <QuickSearchStyle />
-      <div className="quick-search-container">
+      <div
+        className="quick-search-container"
+        onKeyDown={(e) => {
+          e.stopPropagation();
+        }}
+      >
         <Command label={label} shouldFilter={false} ref={ref}>
           {showInput && (
             <QuickSearchInput

src/frontend/apps/impress/src/components/quick-search/QuickSearchInput.tsx

@@ -57,6 +57,9 @@ export const QuickSearchInput = ({
           /* eslint-disable-next-line jsx-a11y/no-autofocus */
           autoFocus={true}
           aria-label={t('Quick search input')}
+          onClick={(e) => {
+            e.stopPropagation();
+          }}
           value={inputValue}
           role="combobox"
           placeholder={placeholder ?? t('Search')}

src/frontend/apps/impress/src/core/AppProvider.tsx

@@ -41,7 +41,10 @@ export function AppProvider({ children }: { children: React.ReactNode }) {
     <QueryClientProvider client={queryClient}>
       <CunninghamProvider theme={theme}>
         <ConfigProvider>
-          <Auth>{children}</Auth>
+          <Auth>
+            {children}
+            <div id="modals" />
+          </Auth>
         </ConfigProvider>
       </CunninghamProvider>
     </QueryClientProvider>

src/frontend/apps/impress/src/core/config/ConfigProvider.tsx

@@ -3,7 +3,7 @@ import { PropsWithChildren, useEffect } from 'react';
 
 import { Box } from '@/components';
 import { useCunninghamTheme } from '@/cunningham';
-import { CrispProvider, PostHogProvider } from '@/services';
+import { PostHogProvider, configureCrispSession } from '@/services';
 import { useSentryStore } from '@/stores/useSentryStore';
 
 import { useConfig } from './api/useConfig';
@@ -29,6 +29,14 @@ export const ConfigProvider = ({ children }: PropsWithChildren) => {
     setTheme(conf.FRONTEND_THEME);
   }, [conf?.FRONTEND_THEME, setTheme]);
 
+  useEffect(() => {
+    if (!conf?.CRISP_WEBSITE_ID) {
+      return;
+    }
+
+    configureCrispSession(conf.CRISP_WEBSITE_ID);
+  }, [conf?.CRISP_WEBSITE_ID]);
+
   if (!conf) {
     return (
       <Box $height="100vh" $width="100vw" $align="center" $justify="center">
@@ -37,11 +45,5 @@ export const ConfigProvider = ({ children }: PropsWithChildren) => {
     );
   }
 
-  return (
-    <PostHogProvider conf={conf.POSTHOG_KEY}>
-      <CrispProvider websiteId={conf?.CRISP_WEBSITE_ID}>
-        {children}
-      </CrispProvider>
-    </PostHogProvider>
-  );
+  return <PostHogProvider conf={conf.POSTHOG_KEY}>{children}</PostHogProvider>;
 };

src/frontend/apps/impress/src/cunningham/cunningham-style.css

@@ -310,7 +310,7 @@ input:-webkit-autofill:focus {
 }
 
 /**
- * Checkbox
+ * Others
 */
 .c__checkbox:focus-within {
   border-color: transparent;
@@ -365,8 +365,7 @@ input:-webkit-autofill:focus {
 }
 
 .c__button--medium {
-  height: auto;
-  min-height: var(--c--components--button--medium-height);
+  padding: 0.9rem var(--c--theme--spacings--s);
 }
 
 .c__button--small {
@@ -552,8 +551,6 @@ input:-webkit-autofill:focus {
 
 .c__modal__close .c__button {
   padding: 0 !important;
-  top: -0.65rem;
-  right: -0.65rem;
 }
 
 .c__modal--full .c__modal__content {
@@ -612,22 +609,3 @@ input:-webkit-autofill:focus {
 .c__tooltip {
   padding: 4px 6px;
 }
-
-/**
- * Alert
-*/
-.c__alert--error {
-  background-color: var(--c--components--alert--error--background-color);
-  border-left-color: var(--c--components--alert--error--border-left-color);
-}
-
-.c__alert--error .c__button--tertiary {
-  background-color: var(--c--components--alert--error--close--background-color);
-  color: var(--c--components--alert--error--close--color);
-}
-
-.c__alert.c__alert--error .c__button--tertiary:hover {
-  background-color: var(
-    --c--components--alert--error--close--background-color-hover
-  );
-}

src/frontend/apps/impress/src/cunningham/cunningham-tokens.css

@@ -484,19 +484,6 @@
   --c--theme--logo--widthFooter: 220px;
   --c--theme--logo--alt: gouvernement logo;
   --c--components--alert--border-radius: 0;
-  --c--components--alert--error--background-color: var(
-    --c--theme--colors--danger-100
-  );
-  --c--components--alert--error--border-left-color: var(
-    --c--theme--colors--danger-400
-  );
-  --c--components--alert--error--close--color: white;
-  --c--components--alert--error--close--background-color: var(
-    --c--theme--colors--danger-400
-  );
-  --c--components--alert--error--close--background-color-hover: var(
-    --c--theme--colors--danger-600
-  );
   --c--components--modal--width-small: 342px;
   --c--components--button--medium-height: 40px;
   --c--components--button--medium-text-height: 40px;

src/frontend/apps/impress/src/cunningham/cunningham-tokens.ts

@@ -483,18 +483,7 @@ export const tokens = {
         },
       },
       components: {
-        alert: {
-          'border-radius': '0',
-          error: {
-            'background-color': 'var(--c--theme--colors--danger-100)',
-            'border-left-color': 'var(--c--theme--colors--danger-400)',
-            close: {
-              color: 'white',
-              'background-color': 'var(--c--theme--colors--danger-400)',
-              'background-color-hover': 'var(--c--theme--colors--danger-600)',
-            },
-          },
-        },
+        alert: { 'border-radius': '0' },
         modal: { 'width-small': '342px' },
         button: {
           'medium-height': '40px',

src/frontend/apps/impress/src/features/auth/api/useAuthQuery.tsx

@@ -1,6 +1,6 @@
 import { UseQueryOptions, useQuery } from '@tanstack/react-query';
 
-import { APIError, errorCauses, fetchAPI } from '@/api';
+import { APIError, fetchAPI } from '@/api';
 
 import { User } from './types';
 
@@ -17,10 +17,7 @@ import { User } from './types';
 export const getMe = async (): Promise<User> => {
   const response = await fetchAPI(`users/me/`);
   if (!response.ok) {
-    throw new APIError(
-      `Couldn't fetch user data: ${response.statusText}`,
-      await errorCauses(response),
-    );
+    throw new Error(`Couldn't fetch user data: ${response.statusText}`);
   }
   return response.json() as Promise<User>;
 };

src/frontend/apps/impress/src/features/auth/components/Auth.tsx

@@ -5,7 +5,6 @@ import { PropsWithChildren } from 'react';
 import { Box } from '@/components';
 
 import { useAuth } from '../hooks';
-import { getAuthUrl } from '../utils';
 
 export const Auth = ({ children }: PropsWithChildren) => {
   const { isLoading, pathAllowed, isFetchedAfterMount, authenticated } =
@@ -20,22 +19,6 @@ export const Auth = ({ children }: PropsWithChildren) => {
     );
   }
 
-  /**
-   * If the user is authenticated and wanted initially to access a document,
-   * we redirect to the document page.
-   */
-  if (authenticated) {
-    const authUrl = getAuthUrl();
-    if (authUrl) {
-      void replace(authUrl);
-      return (
-        <Box $height="100vh" $width="100vw" $align="center" $justify="center">
-          <Loader />
-        </Box>
-      );
-    }
-  }
-
   /**
    * If the user is not authenticated and the path is not allowed, we redirect to the login page.
    */

src/frontend/apps/impress/src/features/auth/hooks/useAuth.tsx

@@ -2,12 +2,13 @@ import { useRouter } from 'next/router';
 import { useEffect, useState } from 'react';
 
 import { useAuthQuery } from '../api';
+import { getAuthUrl } from '../utils';
 
 const regexpUrlsAuth = [/\/docs\/$/g, /\/docs$/g, /^\/$/g];
 
 export const useAuth = () => {
   const { data: user, ...authStates } = useAuthQuery();
-  const { pathname } = useRouter();
+  const { pathname, replace } = useRouter();
 
   const [pathAllowed, setPathAllowed] = useState<boolean>(
     !regexpUrlsAuth.some((regexp) => !!pathname.match(regexp)),
@@ -17,10 +18,17 @@ export const useAuth = () => {
     setPathAllowed(!regexpUrlsAuth.some((regexp) => !!pathname.match(regexp)));
   }, [pathname]);
 
-  return {
-    user,
-    authenticated: !!user && authStates.isSuccess,
-    pathAllowed,
-    ...authStates,
-  };
+  // Redirect to the path before login
+  useEffect(() => {
+    if (!user) {
+      return;
+    }
+
+    const authUrl = getAuthUrl();
+    if (authUrl) {
+      void replace(authUrl);
+    }
+  }, [user, replace]);
+
+  return { user, authenticated: !!user, pathAllowed, ...authStates };
 };

src/frontend/apps/impress/src/features/auth/index.ts

@@ -1,4 +1,4 @@
-export * from './api';
+export * from './api/types';
 export * from './components';
 export * from './hooks';
 export * from './utils';

src/frontend/apps/impress/src/features/docs/doc-editor/components/AIButton.tsx

@@ -20,7 +20,7 @@ import {
   AITransformActions,
   useDocAITransform,
   useDocAITranslate,
-} from '../../api';
+} from '../api/';
 
 type LanguageTranslate = {
   value: string;

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteEditor.tsx

@@ -1,7 +1,6 @@
 import {
   BlockNoteSchema,
   Dictionary,
-  defaultBlockSpecs,
   locales,
   withPageBreak,
 } from '@blocknote/core';
@@ -26,17 +25,9 @@ import { cssEditor } from '../styles';
 import { randomColor } from '../utils';
 
 import { BlockNoteSuggestionMenu } from './BlockNoteSuggestionMenu';
-import { BlockNoteToolbar } from './BlockNoteToolBar/BlockNoteToolbar';
-import { QuoteBlock } from './custom-blocks';
+import { BlockNoteToolbar } from './BlockNoteToolbar';
 
-export const blockNoteSchema = withPageBreak(
-  BlockNoteSchema.create({
-    blockSpecs: {
-      ...defaultBlockSpecs,
-      quote: QuoteBlock,
-    },
-  }),
-);
+export const blockNoteSchema = withPageBreak(BlockNoteSchema.create());
 
 interface BlockNoteEditorProps {
   doc: Doc;
@@ -134,7 +125,7 @@ export const BlockNoteEditor = ({ doc, provider }: BlockNoteEditorProps) => {
       $css={cssEditor(readOnly)}
     >
       {errorAttachment && (
-        <Box $margin={{ bottom: 'big', top: 'none', horizontal: 'large' }}>
+        <Box $margin={{ bottom: 'big' }}>
           <TextErrors
             causes={errorAttachment.cause}
             canClose
@@ -150,8 +141,8 @@ export const BlockNoteEditor = ({ doc, provider }: BlockNoteEditorProps) => {
         editable={!readOnly}
         theme="light"
       >
-        <BlockNoteSuggestionMenu />
         <BlockNoteToolbar />
+        <BlockNoteSuggestionMenu />
       </BlockNoteView>
     </Box>
   );

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteSuggestionMenu.tsx

@@ -5,19 +5,13 @@ import {
   getDefaultReactSlashMenuItems,
   getPageBreakReactSlashMenuItems,
   useBlockNoteEditor,
-  useDictionary,
 } from '@blocknote/react';
 import React, { useMemo } from 'react';
-import { useTranslation } from 'react-i18next';
 
-import { DocsBlockSchema } from '../types';
-
-import { getQuoteReactSlashMenuItems } from './custom-blocks';
+import { DocsBlockNoteEditor } from '../types';
 
 export const BlockNoteSuggestionMenu = () => {
-  const editor = useBlockNoteEditor<DocsBlockSchema>();
-  const { t } = useTranslation();
-  const basicBlocksName = useDictionary().slash_menu.page_break.group;
+  const editor = useBlockNoteEditor() as DocsBlockNoteEditor;
 
   const getSlashMenuItems = useMemo(() => {
     return async (query: string) =>
@@ -26,12 +20,11 @@ export const BlockNoteSuggestionMenu = () => {
           combineByGroup(
             getDefaultReactSlashMenuItems(editor),
             getPageBreakReactSlashMenuItems(editor),
-            getQuoteReactSlashMenuItems(editor, t, basicBlocksName),
           ),
           query,
         ),
       );
-  }, [basicBlocksName, editor, t]);
+  }, [editor]);
 
   return (
     <SuggestionMenuController

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteToolBar/BlockNoteToolbar.tsx

@@ -1,75 +0,0 @@
-import '@blocknote/mantine/style.css';
-import {
-  FormattingToolbar,
-  FormattingToolbarController,
-  blockTypeSelectItems,
-  getFormattingToolbarItems,
-  useDictionary,
-} from '@blocknote/react';
-import React, { useCallback, useMemo, useState } from 'react';
-import { useTranslation } from 'react-i18next';
-
-import { getQuoteFormattingToolbarItems } from '../custom-blocks';
-
-import { AIGroupButton } from './AIButton';
-import { FileDownloadButton } from './FileDownloadButton';
-import { MarkdownButton } from './MarkdownButton';
-import { ModalConfirmDownloadUnsafe } from './ModalConfirmDownloadUnsafe';
-
-export const BlockNoteToolbar = () => {
-  const dict = useDictionary();
-  const [confirmOpen, setIsConfirmOpen] = useState(false);
-  const [onConfirm, setOnConfirm] = useState<() => void | Promise<void>>();
-  const { t } = useTranslation();
-
-  const toolbarItems = useMemo(() => {
-    const toolbarItems = getFormattingToolbarItems([
-      ...blockTypeSelectItems(dict),
-      getQuoteFormattingToolbarItems(t),
-    ]);
-    const fileDownloadButtonIndex = toolbarItems.findIndex(
-      (item) => item.key === 'fileDownloadButton',
-    );
-    if (fileDownloadButtonIndex !== -1) {
-      toolbarItems.splice(
-        fileDownloadButtonIndex,
-        1,
-        <FileDownloadButton
-          key="fileDownloadButton"
-          open={(onConfirm) => {
-            setIsConfirmOpen(true);
-            setOnConfirm(() => onConfirm);
-          }}
-        />,
-      );
-    }
-
-    return toolbarItems;
-  }, [dict, t]);
-
-  const formattingToolbar = useCallback(() => {
-    return (
-      <FormattingToolbar>
-        {toolbarItems}
-
-        {/* Extra button to do some AI powered actions */}
-        <AIGroupButton key="AIButton" />
-
-        {/* Extra button to convert from markdown to json */}
-        <MarkdownButton key="customButton" />
-      </FormattingToolbar>
-    );
-  }, [toolbarItems]);
-
-  return (
-    <>
-      <FormattingToolbarController formattingToolbar={formattingToolbar} />
-      {confirmOpen && (
-        <ModalConfirmDownloadUnsafe
-          onClose={() => setIsConfirmOpen(false)}
-          onConfirm={onConfirm}
-        />
-      )}
-    </>
-  );
-};

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteToolBar/FileDownloadButton.tsx

@@ -1,111 +0,0 @@
-import {
-  BlockSchema,
-  InlineContentSchema,
-  StyleSchema,
-  checkBlockIsFileBlock,
-  checkBlockIsFileBlockWithPlaceholder,
-} from '@blocknote/core';
-import {
-  useBlockNoteEditor,
-  useComponentsContext,
-  useDictionary,
-  useSelectedBlocks,
-} from '@blocknote/react';
-import { useCallback, useMemo } from 'react';
-import { RiDownload2Fill } from 'react-icons/ri';
-
-import { downloadFile, exportResolveFileUrl } from '@/features/docs/doc-export';
-
-export const FileDownloadButton = ({
-  open,
-}: {
-  open: (onConfirm: () => Promise<void> | void) => void;
-}) => {
-  const dict = useDictionary();
-  const Components = useComponentsContext();
-
-  const editor = useBlockNoteEditor<
-    BlockSchema,
-    InlineContentSchema,
-    StyleSchema
-  >();
-
-  const selectedBlocks = useSelectedBlocks(editor);
-
-  const fileBlock = useMemo(() => {
-    // Checks if only one block is selected.
-    if (selectedBlocks.length !== 1) {
-      return undefined;
-    }
-
-    const block = selectedBlocks[0];
-
-    if (checkBlockIsFileBlock(block, editor)) {
-      return block;
-    }
-
-    return undefined;
-  }, [editor, selectedBlocks]);
-
-  const onClick = useCallback(async () => {
-    if (fileBlock && fileBlock.props.url) {
-      editor.focus();
-
-      const url = fileBlock.props.url as string;
-
-      /**
-       * If not hosted on our domain, means not a file uploaded by the user,
-       * we do what Blocknote was doing initially.
-       */
-      if (!url.includes(window.location.hostname)) {
-        if (!editor.resolveFileUrl) {
-          window.open(url);
-        } else {
-          void editor
-            .resolveFileUrl(url)
-            .then((downloadUrl) => window.open(downloadUrl));
-        }
-
-        return;
-      }
-
-      if (!url.includes('-unsafe')) {
-        const blob = (await exportResolveFileUrl(url, undefined)) as Blob;
-        downloadFile(blob, url.split('/').pop() || 'file');
-      } else {
-        const onConfirm = async () => {
-          const blob = (await exportResolveFileUrl(url, undefined)) as Blob;
-          downloadFile(blob, url.split('/').pop() || 'file (unsafe)');
-        };
-
-        open(onConfirm);
-      }
-    }
-  }, [editor, fileBlock, open]);
-
-  if (
-    !fileBlock ||
-    checkBlockIsFileBlockWithPlaceholder(fileBlock, editor) ||
-    !Components
-  ) {
-    return null;
-  }
-
-  return (
-    <>
-      <Components.FormattingToolbar.Button
-        className="bn-button"
-        label={
-          dict.formatting_toolbar.file_download.tooltip[fileBlock.type] ||
-          dict.formatting_toolbar.file_download.tooltip['file']
-        }
-        mainTooltip={
-          dict.formatting_toolbar.file_download.tooltip[fileBlock.type] ||
-          dict.formatting_toolbar.file_download.tooltip['file']
-        }
-        icon={<RiDownload2Fill />}
-        onClick={() => void onClick()}
-      />
-    </>
-  );
-};

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteToolBar/ModalConfirmDownloadUnsafe.tsx

@@ -1,74 +0,0 @@
-import { Button, Modal, ModalSize } from '@openfun/cunningham-react';
-import { useTranslation } from 'react-i18next';
-
-import { Box, Text } from '@/components';
-
-interface ModalConfirmDownloadUnsafeProps {
-  onClose: () => void;
-  onConfirm?: () => Promise<void> | void;
-}
-
-export const ModalConfirmDownloadUnsafe = ({
-  onConfirm,
-  onClose,
-}: ModalConfirmDownloadUnsafeProps) => {
-  const { t } = useTranslation();
-
-  return (
-    <Modal
-      isOpen
-      closeOnClickOutside
-      onClose={() => onClose()}
-      rightActions={
-        <>
-          <Button
-            aria-label={t('Close the modal')}
-            color="secondary"
-            onClick={() => onClose()}
-          >
-            {t('Cancel')}
-          </Button>
-          <Button
-            aria-label={t('Download')}
-            color="danger"
-            onClick={() => {
-              console.log('onClick');
-              if (onConfirm) {
-                void onConfirm();
-              }
-              onClose();
-            }}
-          >
-            {t('Download anyway')}
-          </Button>
-        </>
-      }
-      size={ModalSize.SMALL}
-      title={
-        <Text
-          $gap="0.7rem"
-          $size="h6"
-          $align="flex-start"
-          $variation="1000"
-          $direction="row"
-        >
-          <Text $isMaterialIcon $theme="warning">
-            warning
-          </Text>
-          {t('Warning')}
-        </Text>
-      }
-    >
-      <Box aria-label={t('Modal confirmation to download the attachment')}>
-        <Box>
-          <Box $direction="column" $gap="0.35rem" $margin={{ top: 'sm' }}>
-            <Text $variation="700">{t('This file is flagged as unsafe.')}</Text>
-            <Text $variation="600">
-              {t('Please download it only if it comes from a trusted source.')}
-            </Text>
-          </Box>
-        </Box>
-      </Box>
-    </Modal>
-  );
-};

src/frontend/apps/impress/src/features/docs/doc-editor/components/BlockNoteToolbar.tsx

@@ -0,0 +1,30 @@
+import '@blocknote/mantine/style.css';
+import {
+  FormattingToolbar,
+  FormattingToolbarController,
+  FormattingToolbarProps,
+  getFormattingToolbarItems,
+} from '@blocknote/react';
+import React, { useCallback } from 'react';
+
+import { AIGroupButton } from './AIButton';
+import { MarkdownButton } from './MarkdownButton';
+
+export const BlockNoteToolbar = () => {
+  const formattingToolbar = useCallback(
+    ({ blockTypeSelectItems }: FormattingToolbarProps) => (
+      <FormattingToolbar>
+        {getFormattingToolbarItems(blockTypeSelectItems)}
+
+        {/* Extra button to do some AI powered actions */}
+        <AIGroupButton key="AIButton" />
+
+        {/* Extra button to convert from markdown to json */}
+        <MarkdownButton key="customButton" />
+      </FormattingToolbar>
+    ),
+    [],
+  );
+
+  return <FormattingToolbarController formattingToolbar={formattingToolbar} />;
+};

src/frontend/apps/impress/src/features/docs/doc-editor/components/custom-blocks/QuoteBlock.tsx

@@ -1,77 +0,0 @@
-import { defaultProps, insertOrUpdateBlock } from '@blocknote/core';
-import { BlockTypeSelectItem, createReactBlockSpec } from '@blocknote/react';
-import { TFunction } from 'i18next';
-import React from 'react';
-
-import { Text } from '@/components';
-import { useCunninghamTheme } from '@/cunningham';
-
-import { DocsBlockNoteEditor } from '../../types';
-
-export const QuoteBlock = createReactBlockSpec(
-  {
-    type: 'quote',
-    propSchema: {
-      textAlignment: defaultProps.textAlignment,
-      textColor: defaultProps.textColor,
-    },
-    content: 'inline',
-  },
-  {
-    render: (props) => {
-      // eslint-disable-next-line react-hooks/rules-of-hooks
-      const { colorsTokens } = useCunninghamTheme();
-
-      return (
-        <Text
-          className="inline-content"
-          $margin="0 0 1rem 0"
-          $padding="0.5rem 1rem"
-          $variation="600"
-          style={{
-            borderLeft: `4px solid ${colorsTokens()['greyscale-300']}`,
-            fontStyle: 'italic',
-            flexGrow: 1,
-          }}
-          ref={props.contentRef}
-        />
-      );
-    },
-  },
-);
-
-export const getQuoteReactSlashMenuItems = (
-  editor: DocsBlockNoteEditor,
-  t: TFunction<'translation', undefined>,
-  group: string,
-) => [
-  {
-    title: t('Quote'),
-    onItemClick: () => {
-      insertOrUpdateBlock(editor, {
-        type: 'quote',
-      });
-    },
-    aliases: ['quote', 'blockquote', 'citation'],
-    group,
-    icon: (
-      <Text $isMaterialIcon $size="18px">
-        format_quote
-      </Text>
-    ),
-    subtext: t('Add a quote block'),
-  },
-];
-
-export const getQuoteFormattingToolbarItems = (
-  t: TFunction<'translation', undefined>,
-): BlockTypeSelectItem => ({
-  name: t('Quote'),
-  type: 'quote',
-  icon: () => (
-    <Text $isMaterialIcon $size="16px">
-      format_quote
-    </Text>
-  ),
-  isSelected: (block) => block.type === 'quote',
-});

src/frontend/apps/impress/src/features/docs/doc-editor/components/custom-blocks/index.ts

@@ -1 +0,0 @@
-export * from './QuoteBlock';

src/frontend/apps/impress/src/features/docs/doc-editor/components/index.ts

@@ -1,2 +1 @@
 export * from './DocEditor';
-export * from './custom-blocks/';

src/frontend/apps/impress/src/features/docs/doc-editor/styles.tsx

@@ -6,14 +6,6 @@ export const cssEditor = (readonly: boolean) => css`
   & .ProseMirror {
     height: 100%;
 
-    img.bn-visual-media[src*='-unsafe'] {
-      pointer-events: none;
-    }
-
-    .bn-side-menu[data-block-type='quote'] {
-      height: 46px;
-    }
-
     .collaboration-cursor-custom__base {
       position: relative;
     }

src/frontend/apps/impress/src/features/docs/doc-editor/types.tsx

@@ -17,12 +17,8 @@ export type HeadingBlock = {
   };
 };
 
-export type DocsBlockSchema = typeof blockNoteSchema.blockSchema;
-export type DocsInlineContentSchema =
-  typeof blockNoteSchema.inlineContentSchema;
-export type DocsStyleSchema = typeof blockNoteSchema.styleSchema;
 export type DocsBlockNoteEditor = BlockNoteEditor<
-  DocsBlockSchema,
-  DocsInlineContentSchema,
-  DocsStyleSchema
+  typeof blockNoteSchema.blockSchema,
+  typeof blockNoteSchema.inlineContentSchema,
+  typeof blockNoteSchema.styleSchema
 >;

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/headingPDF.tsx

@@ -1,25 +0,0 @@
-import { Text } from '@react-pdf/renderer';
-
-import { DocsExporterPDF } from '../types';
-
-export const blockMappingHeadingPDF: DocsExporterPDF['mappings']['blockMapping']['heading'] =
-  (block, exporter) => {
-    const PIXELS_PER_POINT = 0.75;
-    const MERGE_RATIO = 7.5;
-    const FONT_SIZE = 16;
-    const fontSizeEM =
-      block.props.level === 1 ? 2 : block.props.level === 2 ? 1.5 : 1.17;
-    return (
-      <Text
-        key={block.id}
-        style={{
-          fontSize: fontSizeEM * FONT_SIZE * PIXELS_PER_POINT,
-          fontWeight: 700,
-          marginTop: `${fontSizeEM * MERGE_RATIO}px`,
-          marginBottom: `${fontSizeEM * MERGE_RATIO}px`,
-        }}
-      >
-        {exporter.transformInlineContent(block.content)}
-      </Text>
-    );
-  };

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/index.ts

@@ -1,5 +0,0 @@
-export * from './headingPDF';
-export * from './paragraphPDF';
-export * from './quoteDocx';
-export * from './quotePDF';
-export * from './tablePDF';

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/paragraphPDF.tsx

@@ -1,31 +0,0 @@
-import { Text } from '@react-pdf/renderer';
-
-import { DocsExporterPDF } from '../types';
-
-export const blockMappingParagraphPDF: DocsExporterPDF['mappings']['blockMapping']['paragraph'] =
-  (block, exporter) => {
-    /**
-     * Breakline in the editor are not rendered in the PDF
-     * By adding a space if the block is empty we ensure that the block is rendered
-     */
-    if (Array.isArray(block.content)) {
-      block.content.forEach((content) => {
-        if (content.type === 'text' && !content.text) {
-          content.text = ' ';
-        }
-      });
-
-      if (!block.content.length) {
-        block.content.push({
-          styles: {},
-          text: ' ',
-          type: 'text',
-        });
-      }
-    }
-    return (
-      <Text key={block.id}>
-        {exporter.transformInlineContent(block.content)}
-      </Text>
-    );
-  };

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/quoteDocx.tsx

@@ -1,33 +0,0 @@
-import { Paragraph } from 'docx';
-
-import { DocsExporterDocx } from '../types';
-import { docxBlockPropsToStyles } from '../utils';
-
-export const blockMappingQuoteDocx: DocsExporterDocx['mappings']['blockMapping']['quote'] =
-  (block, exporter) => {
-    if (Array.isArray(block.content)) {
-      block.content.forEach((content) => {
-        if (content.type === 'text') {
-          content.styles = {
-            ...content.styles,
-            italic: true,
-            textColor: 'gray',
-          };
-        }
-      });
-    }
-
-    return new Paragraph({
-      ...docxBlockPropsToStyles(block.props, exporter.options.colors),
-      spacing: { before: 10, after: 10 },
-      border: {
-        left: {
-          color: '#cecece',
-          space: 4,
-          style: 'thick',
-        },
-      },
-      style: 'Normal',
-      children: exporter.transformInlineContent(block.content),
-    });
-  };

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/quotePDF.tsx

@@ -1,21 +0,0 @@
-import { Text } from '@react-pdf/renderer';
-
-import { DocsExporterPDF } from '../types';
-
-export const blockMappingQuotePDF: DocsExporterPDF['mappings']['blockMapping']['quote'] =
-  (block, exporter) => {
-    return (
-      <Text
-        style={{
-          fontStyle: 'italic',
-          marginVertical: 10,
-          paddingVertical: 5,
-          paddingLeft: 10,
-          borderLeft: '4px solid #cecece',
-          color: '#666',
-        }}
-      >
-        {exporter.transformInlineContent(block.content)}
-      </Text>
-    );
-  };

src/frontend/apps/impress/src/features/docs/doc-export/blocks-mapping/tablePDF.tsx

@@ -1,52 +0,0 @@
-import { TD, TH, TR, Table } from '@ag-media/react-pdf-table';
-import { View } from '@react-pdf/renderer';
-
-import { DocsExporterPDF } from '../types';
-
-export const blockMappingTablePDF: DocsExporterPDF['mappings']['blockMapping']['table'] =
-  (block, exporter) => {
-    return (
-      <Table>
-        {block.content.rows.map((row, index) => {
-          if (index === 0) {
-            return (
-              <TH key={index}>
-                {row.cells.map((cell, index) => {
-                  // Make empty cells are rendered.
-                  if (cell.length === 0) {
-                    cell.push({
-                      styles: {},
-                      text: ' ',
-                      type: 'text',
-                    });
-                  }
-                  return (
-                    <TD key={index}>{exporter.transformInlineContent(cell)}</TD>
-                  );
-                })}
-              </TH>
-            );
-          }
-          return (
-            <TR key={index}>
-              {row.cells.map((cell, index) => {
-                // Make empty cells are rendered.
-                if (cell.length === 0) {
-                  cell.push({
-                    styles: {},
-                    text: ' ',
-                    type: 'text',
-                  });
-                }
-                return (
-                  <TD key={index}>
-                    <View>{exporter.transformInlineContent(cell)}</View>
-                  </TD>
-                );
-              })}
-            </TR>
-          );
-        })}
-      </Table>
-    );
-  };

src/frontend/apps/impress/src/features/docs/doc-export/components/index.ts

@@ -1 +0,0 @@
-export * from './ModalExport';

src/frontend/apps/impress/src/features/docs/doc-export/index.ts

@@ -1,2 +0,0 @@
-export * from './components';
-export * from './utils';

src/frontend/apps/impress/src/features/docs/doc-export/mappingDocx.tsx

@@ -1,12 +0,0 @@
-import { docxDefaultSchemaMappings } from '@blocknote/xl-docx-exporter';
-
-import { blockMappingQuoteDocx } from './blocks-mapping/';
-import { DocsExporterDocx } from './types';
-
-export const docxDocsSchemaMappings: DocsExporterDocx['mappings'] = {
-  ...docxDefaultSchemaMappings,
-  blockMapping: {
-    ...docxDefaultSchemaMappings.blockMapping,
-    quote: blockMappingQuoteDocx,
-  },
-};

src/frontend/apps/impress/src/features/docs/doc-export/mappingPDF.tsx

@@ -1,20 +0,0 @@
-import { pdfDefaultSchemaMappings } from '@blocknote/xl-pdf-exporter';
-
-import {
-  blockMappingHeadingPDF,
-  blockMappingParagraphPDF,
-  blockMappingQuotePDF,
-  blockMappingTablePDF,
-} from './blocks-mapping';
-import { DocsExporterPDF } from './types';
-
-export const pdfDocsSchemaMappings: DocsExporterPDF['mappings'] = {
-  ...pdfDefaultSchemaMappings,
-  blockMapping: {
-    ...pdfDefaultSchemaMappings.blockMapping,
-    heading: blockMappingHeadingPDF,
-    paragraph: blockMappingParagraphPDF,
-    quote: blockMappingQuotePDF,
-    table: blockMappingTablePDF,
-  },
-};

src/frontend/apps/impress/src/features/docs/doc-export/types.ts

@@ -1,53 +0,0 @@
-import { Exporter } from '@blocknote/core';
-import { Link, Text, TextProps } from '@react-pdf/renderer';
-import {
-  IRunPropertiesOptions,
-  Paragraph,
-  ParagraphChild,
-  Table,
-  TextRun,
-} from 'docx';
-
-import {
-  DocsBlockSchema,
-  DocsInlineContentSchema,
-  DocsStyleSchema,
-} from '../doc-editor';
-import { Access } from '../doc-management';
-
-export interface Template {
-  id: string;
-  abilities: {
-    destroy: boolean;
-    generate_document: boolean;
-    accesses_manage: boolean;
-    retrieve: boolean;
-    update: boolean;
-    partial_update: boolean;
-  };
-  accesses: Access[];
-  title: string;
-  is_public: boolean;
-  css: string;
-  code: string;
-}
-
-export type DocsExporterPDF = Exporter<
-  NoInfer<DocsBlockSchema>,
-  NoInfer<DocsInlineContentSchema>,
-  NoInfer<DocsStyleSchema>,
-  React.ReactElement<Text>,
-  React.ReactElement<Link> | React.ReactElement<Text>,
-  TextProps['style'],
-  React.ReactElement<Text>
->;
-
-export type DocsExporterDocx = Exporter<
-  NoInfer<DocsBlockSchema>,
-  NoInfer<DocsInlineContentSchema>,
-  NoInfer<DocsStyleSchema>,
-  Promise<Paragraph[] | Paragraph | Table> | Paragraph[] | Paragraph | Table,
-  ParagraphChild,
-  IRunPropertiesOptions,
-  TextRun
->;

src/frontend/apps/impress/src/features/docs/doc-export/utils.ts

@@ -1,75 +0,0 @@
-import {
-  COLORS_DEFAULT,
-  DefaultProps,
-  UnreachableCaseError,
-} from '@blocknote/core';
-import { IParagraphOptions, ShadingType } from 'docx';
-
-export function downloadFile(blob: Blob, filename: string) {
-  const url = window.URL.createObjectURL(blob);
-  const a = document.createElement('a');
-  a.style.display = 'none';
-  a.href = url;
-  a.download = filename;
-  document.body.appendChild(a);
-  a.click();
-  document.body.removeChild(a);
-  window.URL.revokeObjectURL(url);
-}
-
-export const exportResolveFileUrl = async (
-  url: string,
-  resolveFileUrl: ((url: string) => Promise<string | Blob>) | undefined,
-) => {
-  if (!url.includes(window.location.hostname) && resolveFileUrl) {
-    return resolveFileUrl(url);
-  }
-
-  try {
-    const response = await fetch(url, {
-      credentials: 'include',
-    });
-
-    return response.blob();
-  } catch {
-    console.error(`Failed to fetch image: ${url}`);
-  }
-
-  return url;
-};
-
-export function docxBlockPropsToStyles(
-  props: Partial<DefaultProps>,
-  colors: typeof COLORS_DEFAULT,
-): IParagraphOptions {
-  return {
-    shading:
-      props.backgroundColor === 'default' || !props.backgroundColor
-        ? undefined
-        : {
-            type: ShadingType.SOLID,
-            color:
-              colors[
-                props.backgroundColor as keyof typeof colors
-              ].background.slice(1),
-          },
-    run:
-      props.textColor === 'default' || !props.textColor
-        ? undefined
-        : {
-            color: colors[props.textColor as keyof typeof colors].text.slice(1),
-          },
-    alignment:
-      !props.textAlignment || props.textAlignment === 'left'
-        ? undefined
-        : props.textAlignment === 'center'
-          ? 'center'
-          : props.textAlignment === 'right'
-            ? 'right'
-            : props.textAlignment === 'justify'
-              ? 'distribute'
-              : (() => {
-                  throw new UnreachableCaseError(props.textAlignment);
-                })(),
-  };
-}

src/frontend/apps/impress/src/features/docs/doc-header/components/DocTitle.tsx

@@ -10,6 +10,7 @@ import { useTranslation } from 'react-i18next';
 import { css } from 'styled-components';
 
 import { Box, Text } from '@/components';
+import { useTreeStore } from '@/components/common/tree/treeStore';
 import { useCunninghamTheme } from '@/cunningham';
 import {
   Doc,
@@ -33,13 +34,11 @@ export const DocTitle = ({ doc }: DocTitleProps) => {
 };
 
 interface DocTitleTextProps {
-  title?: string;
+  title: string;
 }
 
 export const DocTitleText = ({ title }: DocTitleTextProps) => {
   const { isMobile } = useResponsiveStore();
-  const { untitledDocument } = useTrans();
-
   return (
     <Text
       as="h2"
@@ -47,13 +46,15 @@ export const DocTitleText = ({ title }: DocTitleTextProps) => {
       $size={isMobile ? 'h4' : 'h2'}
       $variation="1000"
     >
-      {title || untitledDocument}
+      {title}
     </Text>
   );
 };
 
 const DocTitleInput = ({ doc }: DocTitleProps) => {
   const { isDesktop } = useResponsiveStore();
+  const { updateNode, setSelectedNode } = useTreeStore();
+
   const { t } = useTranslation();
   const { colorsTokens } = useCunninghamTheme();
   const [titleDisplay, setTitleDisplay] = useState(doc.title);
@@ -66,7 +67,7 @@ const DocTitleInput = ({ doc }: DocTitleProps) => {
     listInvalideQueries: [KEY_DOC, KEY_LIST_DOC],
     onSuccess(data) {
       toast(t('Document title updated successfully'), VariantType.SUCCESS);
-
+      updateNode(doc.id, { title: data.title });
       // Broadcast to every user connected to the document
       broadcast(`${KEY_DOC}-${data.id}`);
     },
@@ -116,8 +117,6 @@ const DocTitleInput = ({ doc }: DocTitleProps) => {
           handleTitleSubmit(event.target.textContent || '')
         }
         $color={colorsTokens()['greyscale-1000']}
-        $minHeight="40px"
-        $padding={{ right: 'big' }}
         $css={css`
           &[contenteditable='true']:empty:not(:focus):before {
             content: '${untitledDocument}';

src/frontend/apps/impress/src/features/docs/doc-header/components/DocToolBox.tsx

@@ -18,7 +18,6 @@ import {
 } from '@/components';
 import { useCunninghamTheme } from '@/cunningham';
 import { useEditorStore } from '@/features/docs/doc-editor/';
-import { ModalExport } from '@/features/docs/doc-export/';
 import {
   Doc,
   ModalRemoveDoc,
@@ -31,13 +30,15 @@ import {
 } from '@/features/docs/doc-versioning';
 import { useResponsiveStore } from '@/stores';
 
+import { ModalExport } from './ModalExport';
+
 interface DocToolBoxProps {
   doc: Doc;
 }
 
 export const DocToolBox = ({ doc }: DocToolBoxProps) => {
   const { t } = useTranslation();
-  const hasAccesses = doc.nb_accesses > 1 && doc.abilities.accesses_view;
+  const hasAccesses = doc.nb_accesses_direct > 1 && doc.abilities.accesses_view;
   const queryClient = useQueryClient();
 
   const { spacingsTokens, colorsTokens } = useCunninghamTheme();
@@ -193,7 +194,7 @@ export const DocToolBox = ({ doc }: DocToolBoxProps) => {
                   }}
                   size={isSmallMobile ? 'small' : 'medium'}
                 >
-                  {doc.nb_accesses}
+                  {doc.nb_accesses_direct}
                 </Button>
               </Box>
             )}

src/frontend/apps/impress/src/features/docs/doc-header/components/DocVersionHeader.tsx

@@ -6,7 +6,7 @@ import { useCunninghamTheme } from '@/cunningham';
 import { DocTitleText } from './DocTitle';
 
 interface DocVersionHeaderProps {
-  title?: string;
+  title: string;
 }
 
 export const DocVersionHeader = ({ title }: DocVersionHeaderProps) => {

src/frontend/apps/impress/src/features/docs/doc-header/components/ModalExport.tsx

@@ -1,5 +1,11 @@
-import { DOCXExporter } from '@blocknote/xl-docx-exporter';
-import { PDFExporter } from '@blocknote/xl-pdf-exporter';
+import {
+  DOCXExporter,
+  docxDefaultSchemaMappings,
+} from '@blocknote/xl-docx-exporter';
+import {
+  PDFExporter,
+  pdfDefaultSchemaMappings,
+} from '@blocknote/xl-pdf-exporter';
 import {
   Button,
   Loader,
@@ -9,20 +15,20 @@ import {
   VariantType,
   useToastProvider,
 } from '@openfun/cunningham-react';
-import { pdf } from '@react-pdf/renderer';
+import { Text as PDFText, pdf } from '@react-pdf/renderer';
 import { useMemo, useState } from 'react';
 import { useTranslation } from 'react-i18next';
 import { css } from 'styled-components';
 
 import { Box, Text } from '@/components';
 import { useEditorStore } from '@/features/docs/doc-editor';
-import { Doc, useTrans } from '@/features/docs/doc-management';
+import { Doc } from '@/features/docs/doc-management';
 
 import { TemplatesOrdering, useTemplates } from '../api/useTemplates';
-import { docxDocsSchemaMappings } from '../mappingDocx';
-import { pdfDocsSchemaMappings } from '../mappingPDF';
 import { downloadFile, exportResolveFileUrl } from '../utils';
 
+import { Table } from './blocks/Table';
+
 enum DocDownloadFormat {
   PDF = 'pdf',
   DOCX = 'docx',
@@ -45,7 +51,6 @@ export const ModalExport = ({ onClose, doc }: ModalExportProps) => {
   const [format, setFormat] = useState<DocDownloadFormat>(
     DocDownloadFormat.PDF,
   );
-  const { untitledDocument } = useTrans();
 
   const templateOptions = useMemo(() => {
     const templateOptions = (templates?.pages || [])
@@ -73,7 +78,7 @@ export const ModalExport = ({ onClose, doc }: ModalExportProps) => {
 
     setIsExporting(true);
 
-    const title = (doc.title || untitledDocument)
+    const title = doc.title
       .toLowerCase()
       .normalize('NFD')
       .replace(/[\u0300-\u036f]/g, '')
@@ -90,25 +95,91 @@ export const ModalExport = ({ onClose, doc }: ModalExportProps) => {
     if (format === DocDownloadFormat.PDF) {
       const defaultExporter = new PDFExporter(
         editor.schema,
-        pdfDocsSchemaMappings,
+        pdfDefaultSchemaMappings,
       );
 
-      const exporter = new PDFExporter(editor.schema, pdfDocsSchemaMappings, {
-        resolveFileUrl: async (url) =>
-          exportResolveFileUrl(url, defaultExporter.options.resolveFileUrl),
-      });
+      const exporter = new PDFExporter(
+        editor.schema,
+        {
+          ...pdfDefaultSchemaMappings,
+          blockMapping: {
+            ...pdfDefaultSchemaMappings.blockMapping,
+            heading: (block, exporter) => {
+              const PIXELS_PER_POINT = 0.75;
+              const MERGE_RATIO = 7.5;
+              const FONT_SIZE = 16;
+              const fontSizeEM =
+                block.props.level === 1
+                  ? 2
+                  : block.props.level === 2
+                    ? 1.5
+                    : 1.17;
+              return (
+                <PDFText
+                  key={block.id}
+                  style={{
+                    fontSize: fontSizeEM * FONT_SIZE * PIXELS_PER_POINT,
+                    fontWeight: 700,
+                    marginTop: `${fontSizeEM * MERGE_RATIO}px`,
+                    marginBottom: `${fontSizeEM * MERGE_RATIO}px`,
+                  }}
+                >
+                  {exporter.transformInlineContent(block.content)}
+                </PDFText>
+              );
+            },
+            paragraph: (block, exporter) => {
+              /**
+               * Breakline in the editor are not rendered in the PDF
+               * By adding a space if the block is empty we ensure that the block is rendered
+               */
+              if (Array.isArray(block.content)) {
+                block.content.forEach((content) => {
+                  if (content.type === 'text' && !content.text) {
+                    content.text = ' ';
+                  }
+                });
+
+                if (!block.content.length) {
+                  block.content.push({
+                    styles: {},
+                    text: ' ',
+                    type: 'text',
+                  });
+                }
+              }
+              return (
+                <PDFText key={block.id}>
+                  {exporter.transformInlineContent(block.content)}
+                </PDFText>
+              );
+            },
+            table: (block, transformer) => {
+              return <Table data={block.content} transformer={transformer} />;
+            },
+          },
+        },
+        {
+          resolveFileUrl: async (url) =>
+            exportResolveFileUrl(url, defaultExporter.options.resolveFileUrl),
+        },
+      );
       const pdfDocument = await exporter.toReactPDFDocument(exportDocument);
       blobExport = await pdf(pdfDocument).toBlob();
     } else {
       const defaultExporter = new DOCXExporter(
         editor.schema,
-        docxDocsSchemaMappings,
+        docxDefaultSchemaMappings,
       );
 
-      const exporter = new DOCXExporter(editor.schema, docxDocsSchemaMappings, {
-        resolveFileUrl: async (url) =>
-          exportResolveFileUrl(url, defaultExporter.options.resolveFileUrl),
-      });
+      const exporter = new DOCXExporter(
+        editor.schema,
+        docxDefaultSchemaMappings,
+        {
+          resolveFileUrl: async (url) =>
+            exportResolveFileUrl(url, defaultExporter.options.resolveFileUrl),
+        },
+      );
 
       blobExport = await exporter.toBlob(exportDocument);
     }

src/frontend/apps/impress/src/features/docs/doc-header/components/blocks/Table.tsx

@@ -0,0 +1,76 @@
+import { TD, TH, TR, Table as TablePDF } from '@ag-media/react-pdf-table';
+import {
+  DefaultBlockSchema,
+  Exporter,
+  InlineContentSchema,
+  StyleSchema,
+  TableContent,
+} from '@blocknote/core';
+import { View } from '@react-pdf/renderer';
+import { ReactNode } from 'react';
+
+export const Table = (props: {
+  data: TableContent<InlineContentSchema>;
+  transformer: Exporter<
+    DefaultBlockSchema,
+    InlineContentSchema,
+    StyleSchema,
+    unknown,
+    unknown,
+    unknown,
+    unknown
+  >;
+}) => {
+  return (
+    <TablePDF>
+      {props.data.rows.map((row, index) => {
+        if (index === 0) {
+          return (
+            <TH key={index}>
+              {row.cells.map((cell, index) => {
+                // Make empty cells are rendered.
+                if (cell.length === 0) {
+                  cell.push({
+                    styles: {},
+                    text: ' ',
+                    type: 'text',
+                  });
+                }
+                return (
+                  <TD key={index}>
+                    {props.transformer.transformInlineContent(cell)}
+                  </TD>
+                );
+              })}
+            </TH>
+          );
+        }
+        return (
+          <TR key={index}>
+            {row.cells.map((cell, index) => {
+              // Make empty cells are rendered.
+              if (cell.length === 0) {
+                cell.push({
+                  styles: {},
+                  text: ' ',
+                  type: 'text',
+                });
+              }
+              return (
+                <TD key={index}>
+                  <View>
+                    {
+                      props.transformer.transformInlineContent(
+                        cell,
+                      ) as ReactNode
+                    }
+                  </View>
+                </TD>
+              );
+            })}
+          </TR>
+        );
+      })}
+    </TablePDF>
+  );
+};

src/frontend/apps/impress/src/features/docs/doc-header/types.ts

@@ -0,0 +1,18 @@
+import { Access } from '../doc-management';
+
+export interface Template {
+  id: string;
+  abilities: {
+    destroy: boolean;
+    generate_document: boolean;
+    accesses_manage: boolean;
+    retrieve: boolean;
+    update: boolean;
+    partial_update: boolean;
+  };
+  accesses: Access[];
+  title: string;
+  is_public: boolean;
+  css: string;
+  code: string;
+}

src/frontend/apps/impress/src/features/docs/doc-header/utils.ts

@@ -0,0 +1,32 @@
+export function downloadFile(blob: Blob, filename: string) {
+  const url = window.URL.createObjectURL(blob);
+  const a = document.createElement('a');
+  a.style.display = 'none';
+  a.href = url;
+  a.download = filename;
+  document.body.appendChild(a);
+  a.click();
+  document.body.removeChild(a);
+  window.URL.revokeObjectURL(url);
+}
+
+export const exportResolveFileUrl = async (
+  url: string,
+  resolveFileUrl: ((url: string) => Promise<string | Blob>) | undefined,
+) => {
+  if (!url.includes(window.location.hostname) && resolveFileUrl) {
+    return resolveFileUrl(url);
+  }
+
+  try {
+    const response = await fetch(url, {
+      credentials: 'include',
+    });
+
+    return response.blob();
+  } catch {
+    console.error(`Failed to fetch image: ${url}`);
+  }
+
+  return url;
+};

src/frontend/apps/impress/src/features/docs/doc-management/api/useDoc.tsx

@@ -28,6 +28,7 @@ export function useDoc(
   return useQuery<Doc, APIError, Doc>({
     queryKey: [KEY_DOC, param],
     queryFn: () => getDoc(param),
+
     ...queryConfig,
   });
 }

src/frontend/apps/impress/src/features/docs/doc-management/api/useDocs.tsx

@@ -8,6 +8,7 @@ import {
   useAPIInfiniteQuery,
 } from '@/api';
 
+import { DocSearchTarget } from '../../doc-search/components/DocSearchFilters';
 import { Doc } from '../types';
 
 export const isDocsOrdering = (data: string): data is DocsOrdering => {
@@ -31,6 +32,8 @@ export type DocsParams = {
   is_creator_me?: boolean;
   title?: string;
   is_favorite?: boolean;
+  target?: DocSearchTarget;
+  parent_id?: string;
 };
 
 export type DocsResponse = APIList<Doc>;
@@ -53,8 +56,14 @@ export const getDocs = async (params: DocsParams): Promise<DocsResponse> => {
   if (params.is_favorite !== undefined) {
     searchParams.set('is_favorite', params.is_favorite.toString());
   }
-
-  const response = await fetchAPI(`documents/?${searchParams.toString()}`);
+  let response: Response;
+  if (params.parent_id && params.target === DocSearchTarget.CURRENT) {
+    response = await fetchAPI(
+      `documents/${params.parent_id}/descendants/?${searchParams.toString()}`,
+    );
+  } else {
+    response = await fetchAPI(`documents/?${searchParams.toString()}`);
+  }
 
   if (!response.ok) {
     throw new APIError('Failed to get the docs', await errorCauses(response));

src/frontend/apps/impress/src/features/docs/doc-management/components/ModalRemoveDoc.tsx

@@ -17,16 +17,20 @@ import { Doc } from '../types';
 interface ModalRemoveDocProps {
   onClose: () => void;
   doc: Doc;
+  afterDelete?: (doc: Doc) => void;
 }
 
-export const ModalRemoveDoc = ({ onClose, doc }: ModalRemoveDocProps) => {
+export const ModalRemoveDoc = ({
+  onClose,
+  doc,
+  afterDelete,
+}: ModalRemoveDocProps) => {
   const { toast } = useToastProvider();
   const { push } = useRouter();
   const pathname = usePathname();
 
   const {
     mutate: removeDoc,
-
     isError,
     error,
   } = useRemoveDoc({
@@ -34,6 +38,11 @@ export const ModalRemoveDoc = ({ onClose, doc }: ModalRemoveDocProps) => {
       toast(t('The document has been deleted.'), VariantType.SUCCESS, {
         duration: 4000,
       });
+      if (afterDelete) {
+        afterDelete(doc);
+        return;
+      }
+
       if (pathname === '/') {
         onClose();
       } else {
@@ -87,7 +96,9 @@ export const ModalRemoveDoc = ({ onClose, doc }: ModalRemoveDocProps) => {
       <Box aria-label={t('Content modal to delete document')}>
         {!isError && (
           <Text $size="sm" $variation="600">
-            {t('Are you sure you want to delete this document ?')}
+            {t('Are you sure you want to delete the document "{{title}}"?', {
+              title: doc.title,
+            })}
           </Text>
         )}
 

src/frontend/apps/impress/src/features/docs/doc-management/components/ModalRenameDoc.tsx

@@ -0,0 +1,86 @@
+import { Button, Input, Modal, ModalSize } from '@openfun/cunningham-react';
+import { useState } from 'react';
+import { useTranslation } from 'react-i18next';
+
+import { Box, Text } from '@/components';
+import { useTreeStore } from '@/components/common/tree/treeStore';
+
+import { useUpdateDoc } from '../api';
+import { Doc } from '../types';
+
+interface ModalRenameDocProps {
+  onClose: () => void;
+  doc: Doc;
+}
+
+export const ModalRenameDoc = ({ onClose, doc }: ModalRenameDocProps) => {
+  const { t } = useTranslation();
+  const { updateNode } = useTreeStore();
+  const { mutate: updateDoc } = useUpdateDoc();
+  const [title, setTitle] = useState(doc.title);
+
+  const onRename = () => {
+    updateDoc(
+      {
+        id: doc.id,
+        title,
+      },
+      {
+        onSuccess: (doc) => {
+          updateNode(doc.id, doc);
+          onClose();
+        },
+      },
+    );
+  };
+
+  return (
+    <Modal
+      closeOnClickOutside
+      title={
+        <Text $size="h6" $margin={{ all: '0' }} $align="flex-start">
+          {t('Rename')}
+        </Text>
+      }
+      isOpen
+      onClose={onClose}
+      size={ModalSize.SMALL}
+      rightActions={
+        <>
+          <Button
+            aria-label={t('Close the modal')}
+            color="secondary"
+            fullWidth
+            onClick={() => onClose()}
+          >
+            {t('Cancel')}
+          </Button>
+          <Button aria-label={t('Confirm rename')} fullWidth onClick={onRename}>
+            {t('Rename')}
+          </Button>
+        </>
+      }
+    >
+      <Box $padding={{ top: 'base' }}>
+        <Input
+          onClick={(e) => {
+            e.stopPropagation();
+          }}
+          onKeyDown={(e) => {
+            e.stopPropagation();
+            if (e.key === 'Enter') {
+              onRename();
+            }
+          }}
+          value={title}
+          label={t('Document name')}
+          onChange={(e) => {
+            e.stopPropagation();
+
+            setTitle(e.target.value);
+          }}
+        />
+      </Box>
+    </Modal>
+  );
+};

src/frontend/apps/impress/src/features/docs/doc-management/types.tsx

@@ -36,15 +36,18 @@ export type Base64 = string;
 
 export interface Doc {
   id: string;
-  title?: string;
+  title: string;
   content: Base64;
   creator: string;
   is_favorite: boolean;
   link_reach: LinkReach;
   link_role: LinkRole;
-  nb_accesses: number;
+  nb_accesses_direct: number;
+  depth: number;
   created_at: string;
   updated_at: string;
+  numchild: number;
+  children?: Doc[];
   abilities: {
     accesses_manage: boolean;
     accesses_view: boolean;

src/frontend/apps/impress/src/features/docs/doc-search/components/DocSearchFilters.tsx

@@ -0,0 +1,66 @@
+import { Button } from '@openfun/cunningham-react';
+import { useTranslation } from 'react-i18next';
+
+import { Box } from '@/components';
+import { FilterDropdown } from '@/components/filter/FilterDropdown';
+
+export enum DocSearchTarget {
+  ALL = 'all',
+  CURRENT = 'current',
+}
+
+export type DocSearchFiltersValues = {
+  target?: DocSearchTarget;
+};
+
+export type DocSearchFiltersProps = {
+  values?: DocSearchFiltersValues;
+  onValuesChange?: (values: DocSearchFiltersValues) => void;
+  onReset?: () => void;
+};
+
+export const DocSearchFilters = ({
+  values,
+  onValuesChange,
+  onReset,
+}: DocSearchFiltersProps) => {
+  const { t } = useTranslation();
+  const hasFilters = Object.keys(values ?? {}).length > 0;
+  const handleTargetChange = (target: DocSearchTarget) => {
+    onValuesChange?.({ ...values, target });
+  };
+
+  return (
+    <Box
+      $direction="row"
+      $align="center"
+      $height="35px"
+      $justify="space-between"
+      $gap="10px"
+      $margin={{ horizontal: 'sm', vertical: 'base' }}
+    >
+      <Box $direction="row" $align="center" $gap="10px">
+        <FilterDropdown
+          selectedValue={values?.target}
+          options={[
+            {
+              label: t('All docs'),
+              value: DocSearchTarget.ALL,
+              callback: () => handleTargetChange(DocSearchTarget.ALL),
+            },
+            {
+              label: t('Current doc'),
+              value: DocSearchTarget.CURRENT,
+              callback: () => handleTargetChange(DocSearchTarget.CURRENT),
+            },
+          ]}
+        />
+      </Box>
+      {hasFilters && (
+        <Button color="primary-text" size="small" onClick={onReset}>
+          {t('Reset')}
+        </Button>
+      )}
+    </Box>
+  );
+};

src/frontend/apps/impress/src/features/docs/doc-search/components/DocSearchItem.tsx

@@ -4,21 +4,34 @@ import { Doc } from '@/features/docs/doc-management';
 import { SimpleDocItem } from '@/features/docs/docs-grid/';
 import { useResponsiveStore } from '@/stores';
 
+import { LightDocItem } from '../../docs-grid/components/LightDocItem';
+
 type DocSearchItemProps = {
   doc: Doc;
+  isSubPage?: boolean;
 };
 
-export const DocSearchItem = ({ doc }: DocSearchItemProps) => {
+export const DocSearchItem = ({
+  doc,
+  isSubPage = false,
+}: DocSearchItemProps) => {
   const { isDesktop } = useResponsiveStore();
+
   return (
     <Box data-testid={`doc-search-item-${doc.id}`} $width="100%">
       <QuickSearchItemContent
         left={
-          <Box $direction="row" $align="center" $gap="10px" $width="100%">
-            <Box $flex={isDesktop ? 9 : 1}>
-              <SimpleDocItem doc={doc} showAccesses />
+          <>
+            <Box $direction="row" $align="center" $gap="10px" $width="100%">
+              <Box $flex={isDesktop ? 9 : 1}>
+                {isSubPage ? (
+                  <LightDocItem doc={doc} showActions={false} />
+                ) : (
+                  <SimpleDocItem doc={doc} showAccesses />
+                )}
+              </Box>
             </Box>
-          </Box>
+          </>
         }
         right={
           <Icon iconName="keyboard_return" $theme="primary" $variation="800" />

src/frontend/apps/impress/src/features/docs/doc-search/components/DocSearchModal.tsx

@@ -7,6 +7,7 @@ import { InView } from 'react-intersection-observer';
 import { useDebouncedCallback } from 'use-debounce';
 
 import { Box } from '@/components';
+import { useTreeStore } from '@/components/common/tree/treeStore';
 import {
   QuickSearch,
   QuickSearchData,
@@ -17,15 +18,29 @@ import { useResponsiveStore } from '@/stores';
 
 import EmptySearchIcon from '../assets/illustration-docs-empty.png';
 
+import { DocSearchFilters, DocSearchFiltersValues } from './DocSearchFilters';
 import { DocSearchItem } from './DocSearchItem';
 
-type DocSearchModalProps = ModalProps & {};
+type DocSearchModalProps = ModalProps & {
+  showFilters?: boolean;
+  defaultFilters?: DocSearchFiltersValues;
+};
 
-export const DocSearchModal = ({ ...modalProps }: DocSearchModalProps) => {
+export const DocSearchModal = ({
+  showFilters = false,
+  defaultFilters,
+  ...modalProps
+}: DocSearchModalProps) => {
   const { t } = useTranslation();
+  const { rootId, initialNode, reset } = useTreeStore();
   const router = useRouter();
+
   const [search, setSearch] = useState('');
+  const [filters, setFilters] = useState<DocSearchFiltersValues>(
+    defaultFilters ?? {},
+  );
   const { isDesktop } = useResponsiveStore();
+
   const {
     data,
     isFetching,
@@ -36,27 +51,37 @@ export const DocSearchModal = ({ ...modalProps }: DocSearchModalProps) => {
   } = useInfiniteDocs({
     page: 1,
     title: search,
+    ...filters,
+    parent_id: rootId,
   });
   const loading = isFetching || isRefetching || isLoading;
   const handleInputSearch = useDebouncedCallback(setSearch, 300);
 
   const handleSelect = (doc: Doc) => {
+    if (initialNode?.id !== doc.id) {
+      reset(doc.id, [], doc);
+    }
     router.push(`/docs/${doc.id}`);
     modalProps.onClose?.();
   };
 
+  const handleResetFilters = () => {
+    setFilters({});
+  };
+
   const docsData: QuickSearchData<Doc> = useMemo(() => {
     const docs = data?.pages.flatMap((page) => page.results) || [];
-
+    const groupName =
+      filters.target != null ? t('Select a sub-page') : t('Select a page');
     return {
-      groupName: docs.length > 0 ? t('Select a document') : '',
+      groupName: docs.length > 0 ? groupName : '',
       elements: search ? docs : [],
       emptyString: t('No document found'),
       endActions: hasNextPage
         ? [{ content: <InView onChange={() => void fetchNextPage()} /> }]
         : [],
     };
-  }, [data, hasNextPage, fetchNextPage, t, search]);
+  }, [data, hasNextPage, fetchNextPage, t, search, filters.target]);
 
   return (
     <Modal
@@ -75,6 +100,13 @@ export const DocSearchModal = ({ ...modalProps }: DocSearchModalProps) => {
           onFilter={handleInputSearch}
         >
           <Box $height={isDesktop ? '500px' : 'calc(100vh - 68px - 1rem)'}>
+            {showFilters && (
+              <DocSearchFilters
+                values={filters}
+                onValuesChange={setFilters}
+                onReset={handleResetFilters}
+              />
+            )}
             {search.length === 0 && (
               <Box
                 $direction="column"
@@ -93,7 +125,9 @@ export const DocSearchModal = ({ ...modalProps }: DocSearchModalProps) => {
               <QuickSearchGroup
                 onSelect={handleSelect}
                 group={docsData}
-                renderElement={(doc) => <DocSearchItem doc={doc} />}
+                renderElement={(doc) => (
+                  <DocSearchItem isSubPage={filters.target != null} doc={doc} />
+                )}
               />
             )}
           </Box>

src/frontend/apps/impress/src/features/docs/doc-share/components/DocShareAddMemberList.tsx

@@ -9,6 +9,7 @@ import { css } from 'styled-components';
 
 import { APIError } from '@/api';
 import { Box } from '@/components';
+import { useTreeStore } from '@/components/common/tree/treeStore';
 import { useCunninghamTheme } from '@/cunningham';
 import { User } from '@/features/auth';
 import { Doc, Role } from '@/features/docs';
@@ -39,6 +40,7 @@ export const DocShareAddMemberList = ({
   afterInvite,
 }: Props) => {
   const { t } = useTranslation();
+  const { refreshNode } = useTreeStore();
   const { toast } = useToastProvider();
   const [isLoading, setIsLoading] = useState(false);
   const { spacingsTokens, colorsTokens } = useCunninghamTheme();
@@ -94,14 +96,24 @@ export const DocShareAddMemberList = ({
       };
 
       return isInvitationMode
-        ? createInvitation({
-            ...payload,
-            email: user.email,
-          })
-        : createDocAccess({
-            ...payload,
-            memberId: user.id,
-          });
+        ? createInvitation(
+            {
+              ...payload,
+              email: user.email,
+            },
+            {
+              onSuccess: () => refreshNode(doc.id),
+            },
+          )
+        : createDocAccess(
+            {
+              ...payload,
+              memberId: user.id,
+            },
+            {
+              onSuccess: () => refreshNode(doc.id),
+            },
+          );
     });
 
     const settledPromises = await Promise.allSettled(promises);

src/frontend/apps/impress/src/features/docs/doc-share/components/DocShareMemberItem.tsx

@@ -7,6 +7,7 @@ import {
   DropdownMenuOption,
   IconOptions,
 } from '@/components';
+import { useTreeStore } from '@/components/common/tree/treeStore';
 import { useCunninghamTheme } from '@/cunningham';
 import { Access, Doc, Role } from '@/features/docs/doc-management/';
 import { useResponsiveStore } from '@/stores';
@@ -23,6 +24,7 @@ type Props = {
 };
 export const DocShareMemberItem = ({ doc, access }: Props) => {
   const { t } = useTranslation();
+  const { refreshNode } = useTreeStore();
   const { isLastOwner, isOtherOwner } = useWhoAmI(access);
   const { toast } = useToastProvider();
   const { isDesktop } = useResponsiveStore();
@@ -48,15 +50,21 @@ export const DocShareMemberItem = ({ doc, access }: Props) => {
   });
 
   const onUpdate = (newRole: Role) => {
-    updateDocAccess({
-      docId: doc.id,
-      role: newRole,
-      accessId: access.id,
-    });
+    updateDocAccess(
+      {
+        docId: doc.id,
+        role: newRole,
+        accessId: access.id,
+      },
+      { onSuccess: () => refreshNode(doc.id) },
+    );
   };
 
   const onRemove = () => {
-    removeDocAccess({ accessId: access.id, docId: doc.id });
+    removeDocAccess(
+      { accessId: access.id, docId: doc.id },
+      { onSuccess: () => refreshNode(doc.id) },
+    );
   };
 
   const moreActions: DropdownMenuOption[] = [

src/frontend/apps/impress/src/features/docs/doc-share/components/DocShareModal.tsx

@@ -57,6 +57,7 @@ export const DocShareModal = ({ doc, onClose }: Props) => {
   const canShare = doc.abilities.accesses_manage;
   const canViewAccesses = doc.abilities.accesses_view;
   const showMemberSection = inputValue === '' && selectedUsers.length === 0;
+
   const showFooter = selectedUsers.length === 0 && !inputValue;
 
   const onSelect = (user: User) => {