✨(backend) add comment viewset

This commit add the CRUD part to manage comment lifeycle. Permissions
are relying on the Document and Comment abilities. Comment viewset
depends on the Document route and is added to the
document_related_router. Dedicated serializer and permission are
created.

.github/workflows/impress-frontend.yml

@@ -80,7 +80,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Set e2e env variables
-        run: cat env.d/development/common.e2e.dist >> env.d/development/common.dist
+        run: cat env.d/development/common.e2e >> env.d/development/common.local
 
       - name: Install Playwright Browsers
         run: cd src/frontend/apps/e2e && yarn install --frozen-lockfile && yarn install-playwright chromium
@@ -119,7 +119,7 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Set e2e env variables
-        run: cat env.d/development/common.e2e.dist >> env.d/development/common.dist
+        run: cat env.d/development/common.e2e >> env.d/development/common.local
 
       - name: Install Playwright Browsers
         run: cd src/frontend/apps/e2e && yarn install --frozen-lockfile && yarn install-playwright firefox webkit chromium

.gitignore

@@ -40,8 +40,7 @@ venv/
 ENV/
 env.bak/
 venv.bak/
-env.d/development/*
-!env.d/development/*.dist
+env.d/development/*.local
 env.d/terraform
 
 # npm

CHANGELOG.md

@@ -8,6 +8,55 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Added
+
+- ✨(backend) Comments on text editor #1309
+
+### Changed
+
+- ⚡️(frontend) improve accessibility:
+  - #1248
+  - #1235
+  - #1275
+  - #1255
+  - #1262
+  - #1244
+  - #1270
+  - #1282
+
+### Fixed
+
+- 🐛(makefile) Windows compatibility fix for Docker volume mounting #1264
+- 🐛(minio) fix user permission error with Minio and Windows #1264
+
+## [3.5.0] - 2025-07-31
+
+### Added
+
+- ✨(helm) Service Account support for K8s Resources in Helm Charts #780
+- ✨(backend) allow masking documents from the list view #1172
+- ✨(frontend) subdocs can manage link reach #1190
+- ✨(frontend) add duplicate action to doc tree #1175
+- ✨(frontend) Interlinking doc #904
+- ✨(frontend) add multi columns support for editor #1219
+
+### Changed
+
+- ♻️(frontend) search on all docs if no children #1184
+- ♻️(frontend) redirect to doc after duplicate #1175
+- 🔧(project) change env.d system by using local files #1200
+- ⚡️(frontend) improve tree stability #1207
+- ⚡️(frontend) improve accessibility #1232
+- 🛂(frontend) block drag n drop when not desktop #1239
+
+### Fixed
+
+- 🐛(service-worker) Fix useOffline Maximum update depth exceeded #1196
+- 🐛(frontend) fix empty left panel after deleting root doc #1197
+- 🐛(helm) charts generate invalid YAML for collaboration API / WS #890
+- 🐛(frontend) 401 redirection overridden #1214
+- 🐛(frontend) include root parent in search #1243
+
 ## [3.4.2] - 2025-07-18
 
 ### Changed
@@ -18,16 +67,16 @@ and this project adheres to
 
 - 🐛(backend) improve prompt to not use code blocks delimiter #1188
 
-
 ## [3.4.1] - 2025-07-15
 
 ### Fixed
 
 - 🌐(frontend) keep simple tag during export #1154
-- 🐛(back) manage can-edit endpoint without created room 
+- 🐛(back) manage can-edit endpoint without created room
   in the ws #1152
 - 🐛(frontend) fix action buttons not clickable #1162
 - 🐛(frontend) fix crash share modal on grid options #1174
+- 🐛(frontend) fix unfold subdocs not clickable at the bottom #1179
 
 ## [3.4.0] - 2025-07-09
 
@@ -42,12 +91,12 @@ and this project adheres to
 - ✨(backend) add ancestors links reach and role to document API #846
 - 📝(project) add troubleshoot doc #1066
 - 📝(project) add system-requirement doc #1066
-- 🔧(front) configure x-frame-options to DENY in nginx conf #1084
-- ✨(backend) allow to disable checking unsafe mimetype on 
+- 🔧(frontend) configure x-frame-options to DENY in nginx conf #1084
+- ✨(backend) allow to disable checking unsafe mimetype on
   attachment upload #1099
 - ✨(doc) add documentation to install with compose #855
-- ✨ Give priority to users connected to collaboration server 
-  (aka no websocket feature) #1093 
+- ✨ Give priority to users connected to collaboration server
+  (aka no websocket feature) #1093
 
 ### Changed
 
@@ -73,7 +122,6 @@ and this project adheres to
 
 - 🔥(frontend) remove Beta from logo #1095
 
-
 ## [3.3.0] - 2025-05-06
 
 ### Added
@@ -99,13 +147,13 @@ and this project adheres to
 - ⬆️(docker) upgrade node images to alpine 3.21 #973
 
 ### Fixed
+
 - 🐛(y-provider) increase JSON size limits for transcription conversion #989
 
 ### Removed
 
 - 🔥(back) remove footer endpoint #948
 
-
 ## [3.2.1] - 2025-05-06
 
 ## Fixed
@@ -113,7 +161,6 @@ and this project adheres to
 - 🐛(frontend) fix list copy paste #943
 - 📝(doc) update contributing policy (commit signatures are now mandatory) #895
 
-
 ## [3.2.0] - 2025-05-05
 
 ## Added
@@ -124,7 +171,7 @@ and this project adheres to
 - ✨(settings) Allow configuring PKCE for the SSO #886
 - 🌐(i18n) activate chinese and spanish languages #884
 - 🔧(backend) allow overwriting the data directory #893
-- ➕(backend) add  `django-lasuite` dependency #839
+- ➕(backend) add `django-lasuite` dependency #839
 - ✨(frontend) advanced table features #908
 
 ## Changed
@@ -141,7 +188,6 @@ and this project adheres to
 - 🐛(backend) race condition create doc #633
 - 🐛(frontend) fix breaklines in custom blocks #908
 
-
 ## [3.1.0] - 2025-04-07
 
 ## Added
@@ -176,7 +222,6 @@ and this project adheres to
 - 🐛(backend) compute ancestor_links in get_abilities if needed #725
 - 🔒️(back) restrict access to document accesses #801
 
-
 ## [2.6.0] - 2025-03-21
 
 ## Added
@@ -195,7 +240,6 @@ and this project adheres to
 - 🔒️(back) throttle user list endpoint #636
 - 🔒️(back) remove pagination and limit to 5 for user list endpoint #636
 
-
 ## [2.5.0] - 2025-03-18
 
 ## Added
@@ -218,15 +262,14 @@ and this project adheres to
 ## Fixed
 
 - 🐛(frontend) SVG export #706
-- 🐛(frontend) remove scroll listener table content  #688
+- 🐛(frontend) remove scroll listener table content #688
 - 🔒️(back) restrict access to favorite_list endpoint #690
-- 🐛(backend) refactor to fix filtering on children 
-    and descendants views #695
+- 🐛(backend) refactor to fix filtering on children
+  and descendants views #695
 - 🐛(action) fix notify-argocd workflow #713
 - 🚨(helm) fix helmfile lint #736
 - 🚚(frontend) redirect to 401 page when 401 error #759
 
-
 ## [2.4.0] - 2025-03-06
 
 ## Added
@@ -241,7 +284,6 @@ and this project adheres to
 
 - 🐛(frontend) fix collaboration error #684
 
-
 ## [2.3.0] - 2025-03-03
 
 ## Added
@@ -657,36 +699,37 @@ and this project adheres to
 - ✨(frontend) Coming Soon page (#67)
 - 🚀 Impress, project to manage your documents easily and collaboratively.
 
-[unreleased]: https://github.com/numerique-gouv/impress/compare/v3.4.2...main
-[v3.4.2]: https://github.com/numerique-gouv/impress/releases/v3.4.2
-[v3.4.1]: https://github.com/numerique-gouv/impress/releases/v3.4.1
-[v3.4.0]: https://github.com/numerique-gouv/impress/releases/v3.4.0
-[v3.3.0]: https://github.com/numerique-gouv/impress/releases/v3.3.0
-[v3.2.1]: https://github.com/numerique-gouv/impress/releases/v3.2.1
-[v3.2.0]: https://github.com/numerique-gouv/impress/releases/v3.2.0
-[v3.1.0]: https://github.com/numerique-gouv/impress/releases/v3.1.0
-[v3.0.0]: https://github.com/numerique-gouv/impress/releases/v3.0.0
-[v2.6.0]: https://github.com/numerique-gouv/impress/releases/v2.6.0
-[v2.5.0]: https://github.com/numerique-gouv/impress/releases/v2.5.0
-[v2.4.0]: https://github.com/numerique-gouv/impress/releases/v2.4.0
-[v2.3.0]: https://github.com/numerique-gouv/impress/releases/v2.3.0
-[v2.2.0]: https://github.com/numerique-gouv/impress/releases/v2.2.0
-[v2.1.0]: https://github.com/numerique-gouv/impress/releases/v2.1.0
-[v2.0.1]: https://github.com/numerique-gouv/impress/releases/v2.0.1
-[v2.0.0]: https://github.com/numerique-gouv/impress/releases/v2.0.0
-[v1.10.0]: https://github.com/numerique-gouv/impress/releases/v1.10.0
-[v1.9.0]: https://github.com/numerique-gouv/impress/releases/v1.9.0
-[v1.8.2]: https://github.com/numerique-gouv/impress/releases/v1.8.2
-[v1.8.1]: https://github.com/numerique-gouv/impress/releases/v1.8.1
-[v1.8.0]: https://github.com/numerique-gouv/impress/releases/v1.8.0
-[v1.7.0]: https://github.com/numerique-gouv/impress/releases/v1.7.0
-[v1.6.0]: https://github.com/numerique-gouv/impress/releases/v1.6.0
-[1.5.1]: https://github.com/numerique-gouv/impress/releases/v1.5.1
-[1.5.0]: https://github.com/numerique-gouv/impress/releases/v1.5.0
-[1.4.0]: https://github.com/numerique-gouv/impress/releases/v1.4.0
-[1.3.0]: https://github.com/numerique-gouv/impress/releases/v1.3.0
-[1.2.1]: https://github.com/numerique-gouv/impress/releases/v1.2.1
-[1.2.0]: https://github.com/numerique-gouv/impress/releases/v1.2.0
-[1.1.0]: https://github.com/numerique-gouv/impress/releases/v1.1.0
-[1.0.0]: https://github.com/numerique-gouv/impress/releases/v1.0.0
-[0.1.0]: https://github.com/numerique-gouv/impress/releases/v0.1.0
+[unreleased]: https://github.com/suitenumerique/docs/compare/v3.5.0...main
+[v3.5.0]: https://github.com/suitenumerique/docs/releases/v3.5.0
+[v3.4.2]: https://github.com/suitenumerique/docs/releases/v3.4.2
+[v3.4.1]: https://github.com/suitenumerique/docs/releases/v3.4.1
+[v3.4.0]: https://github.com/suitenumerique/docs/releases/v3.4.0
+[v3.3.0]: https://github.com/suitenumerique/docs/releases/v3.3.0
+[v3.2.1]: https://github.com/suitenumerique/docs/releases/v3.2.1
+[v3.2.0]: https://github.com/suitenumerique/docs/releases/v3.2.0
+[v3.1.0]: https://github.com/suitenumerique/docs/releases/v3.1.0
+[v3.0.0]: https://github.com/suitenumerique/docs/releases/v3.0.0
+[v2.6.0]: https://github.com/suitenumerique/docs/releases/v2.6.0
+[v2.5.0]: https://github.com/suitenumerique/docs/releases/v2.5.0
+[v2.4.0]: https://github.com/suitenumerique/docs/releases/v2.4.0
+[v2.3.0]: https://github.com/suitenumerique/docs/releases/v2.3.0
+[v2.2.0]: https://github.com/suitenumerique/docs/releases/v2.2.0
+[v2.1.0]: https://github.com/suitenumerique/docs/releases/v2.1.0
+[v2.0.1]: https://github.com/suitenumerique/docs/releases/v2.0.1
+[v2.0.0]: https://github.com/suitenumerique/docs/releases/v2.0.0
+[v1.10.0]: https://github.com/suitenumerique/docs/releases/v1.10.0
+[v1.9.0]: https://github.com/suitenumerique/docs/releases/v1.9.0
+[v1.8.2]: https://github.com/suitenumerique/docs/releases/v1.8.2
+[v1.8.1]: https://github.com/suitenumerique/docs/releases/v1.8.1
+[v1.8.0]: https://github.com/suitenumerique/docs/releases/v1.8.0
+[v1.7.0]: https://github.com/suitenumerique/docs/releases/v1.7.0
+[v1.6.0]: https://github.com/suitenumerique/docs/releases/v1.6.0
+[1.5.1]: https://github.com/suitenumerique/docs/releases/v1.5.1
+[1.5.0]: https://github.com/suitenumerique/docs/releases/v1.5.0
+[1.4.0]: https://github.com/suitenumerique/docs/releases/v1.4.0
+[1.3.0]: https://github.com/suitenumerique/docs/releases/v1.3.0
+[1.2.1]: https://github.com/suitenumerique/docs/releases/v1.2.1
+[1.2.0]: https://github.com/suitenumerique/docs/releases/v1.2.0
+[1.1.0]: https://github.com/suitenumerique/docs/releases/v1.1.0
+[1.0.0]: https://github.com/suitenumerique/docs/releases/v1.0.0
+[0.1.0]: https://github.com/suitenumerique/docs/releases/v0.1.0

Makefile

@@ -35,9 +35,13 @@ DB_PORT            = 5432
 
 # -- Docker
 # Get the current user ID to use for docker run and docker exec commands
-DOCKER_UID          = $(shell id -u)
-DOCKER_GID          = $(shell id -g)
-DOCKER_USER         = $(DOCKER_UID):$(DOCKER_GID)
+ifeq ($(OS),Windows_NT)
+DOCKER_USER         := 0:0     # run containers as root on Windows
+else
+DOCKER_UID          := $(shell id -u)
+DOCKER_GID          := $(shell id -g)
+DOCKER_USER         := $(DOCKER_UID):$(DOCKER_GID)
+endif
 COMPOSE             = DOCKER_USER=$(DOCKER_USER) docker compose
 COMPOSE_E2E         = DOCKER_USER=$(DOCKER_USER) docker compose -f compose.yml -f compose-e2e.yml
 COMPOSE_EXEC        = $(COMPOSE) exec
@@ -48,7 +52,7 @@ COMPOSE_RUN_CROWDIN = $(COMPOSE_RUN) crowdin crowdin
 
 # -- Backend
 MANAGE              = $(COMPOSE_RUN_APP) python manage.py
-MAIL_YARN           = $(COMPOSE_RUN) -w /app/src/mail node yarn
+MAIL_YARN           = $(COMPOSE_RUN) -w //app/src/mail node yarn
 
 # -- Frontend
 PATH_FRONT          = ./src/frontend
@@ -67,18 +71,18 @@ data/static:
 
 # -- Project
 
-create-env-files: ## Copy the dist env files to env files
-create-env-files: \
-	env.d/development/common \
-	env.d/development/crowdin \
-	env.d/development/postgresql \
-	env.d/development/kc_postgresql
-.PHONY: create-env-files
+create-env-local-files: ## create env.local files in env.d/development
+create-env-local-files: 
+	@touch env.d/development/crowdin.local
+	@touch env.d/development/common.local
+	@touch env.d/development/postgresql.local
+	@touch env.d/development/kc_postgresql.local
+.PHONY: create-env-local-files
 
 pre-bootstrap: \
 	data/media \
 	data/static \
-	create-env-files
+	create-env-local-files
 .PHONY: pre-bootstrap
 
 post-bootstrap: \
@@ -258,20 +262,6 @@ resetdb: ## flush database and create a superuser "admin"
 	@${MAKE} superuser
 .PHONY: resetdb
 
-env.d/development/common:
-	cp -n env.d/development/common.dist env.d/development/common
-
-env.d/development/postgresql:
-	cp -n env.d/development/postgresql.dist env.d/development/postgresql
-
-env.d/development/kc_postgresql:
-	cp -n env.d/development/kc_postgresql.dist env.d/development/kc_postgresql
-
-# -- Internationalization
-
-env.d/development/crowdin:
-	cp -n env.d/development/crowdin.dist env.d/development/crowdin
-
 crowdin-download: ## Download translated message from crowdin
 	@$(COMPOSE_RUN_CROWDIN) download -c crowdin/config.yml
 .PHONY: crowdin-download

bin/_config.sh

@@ -38,6 +38,10 @@ function _set_user() {
 # options: docker compose command options
 # ARGS   : docker compose command arguments
 function _docker_compose() {
+    # Set DOCKER_USER for Windows compatibility with MinIO
+    if [[ "$OSTYPE" == "msys" || "$OSTYPE" == "cygwin" || -n "${WSL_DISTRO_NAME:-}" ]]; then
+        export DOCKER_USER="0:0"
+    fi
 
     echo "🐳(compose) file: '${COMPOSE_FILE}'"
     docker compose \

compose-e2e.yml

@@ -24,5 +24,6 @@ services:
     restart: unless-stopped
     env_file:
       - env.d/development/common
+      - env.d/development/common.local
     ports:
       - "4444:4444"

compose.yml

@@ -10,6 +10,7 @@ services:
       retries: 300
     env_file:
       - env.d/development/postgresql
+      - env.d/development/postgresql.local
     ports:
       - "15432:5432"
 
@@ -66,7 +67,9 @@ services:
       - DJANGO_CONFIGURATION=Development
     env_file:
       - env.d/development/common
+      - env.d/development/common.local
       - env.d/development/postgresql
+      - env.d/development/postgresql.local
     ports:
       - "8071:8000"
     volumes:
@@ -91,7 +94,9 @@ services:
       - DJANGO_CONFIGURATION=Development
     env_file:
       - env.d/development/common
+      - env.d/development/common.local
       - env.d/development/postgresql
+      - env.d/development/postgresql.local
     volumes:
       - ./src/backend:/app
       - ./data/static:/data/static
@@ -135,6 +140,7 @@ services:
       - ".:/app"
     env_file:
       - env.d/development/crowdin
+      - env.d/development/crowdin.local
     user: "${DOCKER_USER:-1000}"
     working_dir: /app
 
@@ -156,6 +162,7 @@ services:
     restart: unless-stopped
     env_file:
       - env.d/development/common
+      - env.d/development/common.local
     ports:
       - "4444:4444"
     volumes:
@@ -174,6 +181,7 @@ services:
       - "5433:5432"
     env_file:
       - env.d/development/kc_postgresql
+      - env.d/development/kc_postgresql.local
 
   keycloak:
     image: quay.io/keycloak/keycloak:20.0.1

docker/files/production/etc/nginx/conf.d/default.conf.template

@@ -11,6 +11,9 @@ server {
     server_name localhost;
     charset utf-8;
 
+    # increase max upload size
+    client_max_body_size 10m;
+
     # Disables server version feedback on pages and in headers
     server_tokens off;
 
@@ -68,7 +71,7 @@ server {
         proxy_set_header Host $host;
     }
 
-    location  /collaboration/api/ {
+    location /collaboration/api/ {
         # Collaboration server
         proxy_pass http://${YPROVIDER_HOST}:4444;
         proxy_set_header Host $host;
@@ -95,7 +98,7 @@ server {
 
         add_header Content-Security-Policy "default-src 'none'" always;
     }
-    
+
     location /media-auth {
         proxy_pass http://docs_backend/api/v1.0/documents/media-auth/;
         proxy_set_header X-Forwarded-Proto https;
@@ -109,4 +112,4 @@ server {
         proxy_set_header Content-Length "";
         proxy_set_header X-Original-Method $request_method;
     }
-}
+}

docs/env.md

@@ -136,9 +136,10 @@ NODE_ENV=production NEXT_PUBLIC_PUBLISH_AS_MIT=false yarn build
 
 Packages with licences incompatible with the MIT licence:
 * `xl-docx-exporter`: [AGPL-3.0](https://github.com/TypeCellOS/BlockNote/blob/main/packages/xl-docx-exporter/LICENSE), 
-* `xl-pdf-exporter`: [AGPL-3.0](https://github.com/TypeCellOS/BlockNote/blob/main/packages/xl-pdf-exporter/LICENSE) 
+* `xl-pdf-exporter`: [AGPL-3.0](https://github.com/TypeCellOS/BlockNote/blob/main/packages/xl-pdf-exporter/LICENSE), 
+* `xl-multi-column`: [AGPL-3.0](https://github.com/TypeCellOS/BlockNote/blob/main/packages/xl-multi-column/LICENSE). 
 
 In `.env.development`, `PUBLISH_AS_MIT` is set to `false`, allowing developers to test Docs with all its features.
 
-⚠️ If you run Docs in production with `PUBLISH_AS_MIT` set to `false` make sure you fulfill your [BlockNote licensing](https://github.com/TypeCellOS/BlockNote/blob/main/packages/xl-pdf-exporter/LICENSE) or [subscription](https://www.blocknotejs.org/about#partner-with-us) obligations.
+⚠️ If you run Docs in production with `PUBLISH_AS_MIT` set to `false` make sure you fulfill your BlockNote licensing or [subscription](https://www.blocknotejs.org/about#partner-with-us) obligations.
 

docs/examples/compose/compose.yaml

@@ -7,12 +7,12 @@ services:
       timeout: 2s
       retries: 300
     env_file:
-    - env.d/postgresql
-    - env.d/common
+      - env.d/postgresql
+      - env.d/common
     environment:
-    - PGDATA=/var/lib/postgresql/data/pgdata
+      - PGDATA=/var/lib/postgresql/data/pgdata
     volumes:
-    - ./data/databases/backend:/var/lib/postgresql/data/pgdata
+      - ./data/databases/backend:/var/lib/postgresql/data/pgdata
 
   redis:
     image: redis:8
@@ -22,12 +22,12 @@ services:
     user: ${DOCKER_USER:-1000}
     restart: always
     environment:
-    - DJANGO_CONFIGURATION=Production
+      - DJANGO_CONFIGURATION=Production
     env_file:
-    - env.d/common
-    - env.d/backend
-    - env.d/yprovider
-    - env.d/postgresql
+      - env.d/common
+      - env.d/backend
+      - env.d/yprovider
+      - env.d/postgresql
     healthcheck:
       test: ["CMD", "python", "manage.py", "check"]
       interval: 15s
@@ -45,24 +45,24 @@ services:
     image: lasuite/impress-y-provider:latest
     user: ${DOCKER_USER:-1000}
     env_file:
-    - env.d/common
-    - env.d/yprovider
+      - env.d/common
+      - env.d/yprovider
 
   frontend:
     image: lasuite/impress-frontend:latest
     user: "101"
     entrypoint:
-    - /docker-entrypoint.sh
+      - /docker-entrypoint.sh
     command: ["nginx", "-g", "daemon off;"]
     env_file:
-    - env.d/common
+      - env.d/common
     # Uncomment and set your values if using our nginx proxy example
     #environment:
-    # - VIRTUAL_HOST=${DOCS_HOST} # used by nginx proxy 
+    # - VIRTUAL_HOST=${DOCS_HOST} # used by nginx proxy
     # - VIRTUAL_PORT=8083 # used by nginx proxy
     # - LETSENCRYPT_HOST=${DOCS_HOST} # used by lets encrypt to generate TLS certificate
     volumes:
-    - ./default.conf.template:/etc/nginx/templates/docs.conf.template
+      - ./default.conf.template:/etc/nginx/templates/docs.conf.template
     depends_on:
       backend:
         condition: service_healthy

docs/examples/compose/keycloak/README.md

@@ -9,9 +9,9 @@
 
 ```bash
 mkdir keycloak
-curl -o compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/keycloak/compose.yaml
-curl -o env.d/kc_postgresql https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/kc_postgresql
-curl -o env.d/keycloak https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/keycloak
+curl -o keycloak/compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/keycloak/compose.yaml
+curl -o keycloak/env.d/kc_postgresql https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/kc_postgresql
+curl -o keycloak/env.d/keycloak https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/keycloak
 ```
 
 ### Step 2:. Update `env.d/` files

docs/examples/compose/keycloak/compose.yaml

@@ -7,23 +7,23 @@ services:
       timeout: 2s
       retries: 300
     env_file:
-    - env.d/kc_postgresql
+      - env.d/kc_postgresql
     volumes:
-    - ./data/keycloak:/var/lib/postgresql/data/pgdata
+      - ./data/keycloak:/var/lib/postgresql/data/pgdata
 
   keycloak:
     image: quay.io/keycloak/keycloak:26.1.3
     command: ["start"]
     env_file:
-    - env.d/kc_postgresql
-    - env.d/keycloak
+      - env.d/kc_postgresql
+      - env.d/keycloak
     # Uncomment and set your values if using our nginx proxy example
     # environment:
-    # - VIRTUAL_HOST=id.yourdomain.tld # used by nginx proxy 
+    # - VIRTUAL_HOST=id.yourdomain.tld # used by nginx proxy
     # - VIRTUAL_PORT=8080 # used by nginx proxy
     # - LETSENCRYPT_HOST=id.yourdomain.tld # used by lets encrypt to generate TLS certificate
     depends_on:
-      kc_postgresql::
+      kc_postgresql:
         condition: service_healthy
         restart: true
 # Uncomment if using our nginx proxy example
@@ -33,4 +33,4 @@ services:
 #
 #networks:
 #  proxy-tier:
-#    external: true
+#    external: true

docs/examples/compose/minio/README.md

@@ -9,7 +9,7 @@
 
 ```bash
 mkdir minio
-curl -o compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/minio/compose.yaml 
+curl -o minio/compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/minio/compose.yaml 
 ```
 
 ### Step 2:. Update compose file with your own values

docs/examples/compose/minio/compose.yaml

@@ -2,8 +2,8 @@ services:
   minio:
     image: minio/minio
     environment:
-    - MINIO_ROOT_USER=<set minio root username>
-    - MINIO_ROOT_PASSWORD=<set minio root password>
+      - MINIO_ROOT_USER=<set minio root username>
+      - MINIO_ROOT_PASSWORD=<set minio root password>
     # Uncomment and set your values if using our nginx proxy example
     # - VIRTUAL_HOST=storage.yourdomain.tld # used by nginx proxy 
     # - VIRTUAL_PORT=9000 # used by nginx proxy
@@ -16,12 +16,12 @@ services:
     entrypoint: ""
     command: minio server /data
     volumes:
-    - ./data/minio:/data
+      - ./data/minio:/data
 # Uncomment if using our nginx proxy example
 #    networks:
-#    - proxy-tier
+#      - proxy-tier
 
 # Uncomment if using our nginx proxy example
 #networks:
 #  proxy-tier:
-#    external: true
+#    external: true

docs/examples/compose/nginx-proxy/README.md

@@ -13,7 +13,7 @@ Acme-companion is a lightweight companion container for nginx-proxy. It handles
 
 ```bash
 mkdir nginx-proxy
-curl -o compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/nginx-proxy/compose.yaml
+curl -o nginx-proxy/compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/nginx-proxy/compose.yaml
 ```
 
 ### Step 2: Edit `DEFAULT_EMAIL` in the compose file.

docs/examples/compose/nginx-proxy/compose.yaml

@@ -3,28 +3,28 @@ services:
     image: nginxproxy/nginx-proxy
     container_name: nginx-proxy
     ports:
-    - "80:80"
-    - "443:443"
+      - "80:80"
+      - "443:443"
     volumes:
-    - html:/usr/share/nginx/html
-    - certs:/etc/nginx/certs:ro
-    - /var/run/docker.sock:/tmp/docker.sock:ro
+      - html:/usr/share/nginx/html
+      - certs:/etc/nginx/certs:ro
+      - /var/run/docker.sock:/tmp/docker.sock:ro
     networks:
-    - proxy-tier
+      - proxy-tier
 
   acme-companion:
     image: nginxproxy/acme-companion
     container_name: nginx-proxy-acme
     environment:
-    - DEFAULT_EMAIL=mail@yourdomain.tld
+      - DEFAULT_EMAIL=mail@yourdomain.tld
     volumes_from:
-    - nginx-proxy
+      - nginx-proxy
     volumes:
-    - certs:/etc/nginx/certs:rw
-    - acme:/etc/acme.sh
-    - /var/run/docker.sock:/var/run/docker.sock:ro
+      - certs:/etc/nginx/certs:rw
+      - acme:/etc/acme.sh
+      - /var/run/docker.sock:/var/run/docker.sock:ro
     networks:
-    - proxy-tier
+      - proxy-tier
 
 networks:
   proxy-tier:

docs/examples/helm/impress.values.yaml

@@ -46,9 +46,6 @@ backend:
     DB_USER: dinum
     DB_PASSWORD: pass
     DB_PORT: 5432
-    POSTGRES_DB: impress
-    POSTGRES_USER: dinum
-    POSTGRES_PASSWORD: pass
     REDIS_URL: redis://default:pass@redis-master:6379/1
     AWS_S3_ENDPOINT_URL: http://minio.impress.svc.cluster.local:9000
     AWS_S3_ACCESS_KEY_ID: root

docs/installation/compose.md

@@ -1,6 +1,6 @@
 # Installation with docker compose
 
-We provide a sample configuration for running Docs using Docker Compose. Please note that this configuration is experimental, and the official way to deploy Docs in production is to use [k8s](../installation/k8s.md)
+We provide a sample configuration for running Docs using Docker Compose. Please note that this configuration is experimental, and the official way to deploy Docs in production is to use [k8s](../installation/kubernetes.md)
 
 ## Requirements
 
@@ -31,11 +31,17 @@ For older versions of Docker Engine that do not include Docker Compose:
 
 ```bash
 mkdir -p docs/env.d
+cd docs
 curl -o compose.yaml https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docs/examples/compose/compose.yaml
 curl -o env.d/common https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/common
 curl -o env.d/backend https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/backend
 curl -o env.d/yprovider https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/yprovider
-curl -o env.d/common https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/postgresql
+curl -o env.d/postgresql https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/env.d/production.dist/postgresql
+```
+
+If you are using the sample nginx-proxy configuration:
+```bash
+curl -o default.conf.template https://raw.githubusercontent.com/suitenumerique/docs/refs/heads/main/docker/files/production/etc/nginx/conf.d/default.conf.template
 ```
 
 ## Step 2: Configuration

docs/installation/kubernetes.md

@@ -168,9 +168,6 @@ DB_NAME: impress
 DB_USER: dinum
 DB_PASSWORD: pass
 DB_PORT: 5432
-POSTGRES_DB: impress
-POSTGRES_USER: dinum
-POSTGRES_PASSWORD: pass
 ```
 
 ### Find s3 bucket connection values

docs/troubleshoot.md

@@ -83,55 +83,6 @@ If you already have CRLF line endings in your local repository, the **best appro
    git commit -m "✏️(project) Fix line endings to LF"
    ```
 
-## Minio Permission Issues on Windows
-
-### Problem Description
-
-On Windows, you may encounter permission-related errors when running Minio in development mode with Docker Compose. This typically happens because:
-
-- **Windows file permissions** don't map well to Unix-style user IDs used in Docker containers
-- **Docker Desktop** may have issues with user mapping when using the `DOCKER_USER` environment variable
-- **Minio container** fails to start or access volumes due to permission conflicts
-
-### Common Symptoms
-
-- Minio container fails to start with permission denied errors
-- Error messages related to file system permissions in Minio logs
-- Unable to create or access buckets in the development environment
-- Docker Compose showing Minio service as unhealthy or exited
-
-### Solution for Windows Users
-
-If you encounter Minio permission issues on Windows, you can temporarily disable user mapping for the Minio service:
-
-1. **Open the `compose.yml` file**
-
-2. **Comment out the user directive** in the `minio` service section:
-   ```yaml
-   minio:
-     # user: ${DOCKER_USER:-1000}  # Comment this line on Windows if permission issues occur
-     image: minio/minio
-     environment:
-       - MINIO_ROOT_USER=impress
-       - MINIO_ROOT_PASSWORD=password
-     # ... rest of the configuration
-   ```
-
-3. **Restart the services**:
-   ```bash
-   make run
-   ```
-
-### Why This Works
-
-- Commenting out the `user` directive allows the Minio container to run with its default user
-- This bypasses Windows-specific permission mapping issues
-- The container will have the necessary permissions to access and manage the mounted volumes
-
-### Note
-
-This is a **development-only workaround**. In production environments, proper user mapping and security considerations should be maintained according to your deployment requirements.
-
 ## Frontend File Watching Issues on Windows
 
 ### Problem Description

env.d/production.dist/backend

@@ -43,8 +43,8 @@ OIDC_RP_CLIENT_ID=<client_id>
 OIDC_RP_CLIENT_SECRET=<client secret>
 OIDC_RP_SIGN_ALGO=RS256
 OIDC_RP_SCOPES="openid email"
-#USER_OIDC_FIELD_TO_SHORTNAME
-#USER_OIDC_FIELDS_TO_FULLNAME
+#OIDC_USERINFO_SHORTNAME_FIELD
+#OIDC_USERINFO_FULLNAME_FIELDS
 
 LOGIN_REDIRECT_URL=https://${DOCS_HOST}
 LOGIN_REDIRECT_URL_FAILURE=https://${DOCS_HOST}

env.d/production.dist/yprovider

@@ -1,4 +1,4 @@
-Y_PROVIDER_API_BASE_URL=http://${YPROVIDER_HOST}:4444/api
+Y_PROVIDER_API_BASE_URL=http://${YPROVIDER_HOST}:4444/api/
 Y_PROVIDER_API_KEY=<generate a random key>
 COLLABORATION_SERVER_SECRET=<generate a random key>
 COLLABORATION_SERVER_ORIGIN=https://${DOCS_HOST}

src/backend/core/api/filters.py

@@ -60,6 +60,9 @@ class ListDocumentFilter(DocumentFilter):
     is_creator_me = django_filters.BooleanFilter(
         method="filter_is_creator_me", label=_("Creator is me")
     )
+    is_masked = django_filters.BooleanFilter(
+        method="filter_is_masked", label=_("Masked")
+    )
     is_favorite = django_filters.BooleanFilter(
         method="filter_is_favorite", label=_("Favorite")
     )
@@ -106,3 +109,22 @@ class ListDocumentFilter(DocumentFilter):
             return queryset
 
         return queryset.filter(is_favorite=bool(value))
+
+    # pylint: disable=unused-argument
+    def filter_is_masked(self, queryset, name, value):
+        """
+        Filter documents based on whether they are masked by the current user.
+
+        Example:
+            - /api/v1.0/documents/?is_masked=true
+                → Filters documents marked as masked by the logged-in user
+            - /api/v1.0/documents/?is_masked=false
+                → Filters documents not marked as masked by the logged-in user
+        """
+        user = self.request.user
+
+        if not user.is_authenticated:
+            return queryset
+
+        queryset_method = queryset.filter if bool(value) else queryset.exclude
+        return queryset_method(link_traces__user=user, link_traces__is_masked=True)

src/backend/core/api/permissions.py

@@ -171,3 +171,19 @@ class ResourceAccessPermission(IsAuthenticated):
 
         action = view.action
         return abilities.get(action, False)
+
+
+class CommentPermission(permissions.BasePermission):
+    """Permission class for comments."""
+
+    def has_permission(self, request, view):
+        """Check permission for a given object."""
+        if view.action in ["create", "list"]:
+            document_abilities = view.get_document_or_404().get_abilities(request.user)
+            return document_abilities["comment"]
+
+        return True
+
+    def has_object_permission(self, request, view, obj):
+        """Check permission for a given object."""
+        return obj.get_abilities(request.user).get(view.action, False)

src/backend/core/api/serializers.py

@@ -801,3 +801,47 @@ class MoveDocumentSerializer(serializers.Serializer):
         choices=enums.MoveNodePositionChoices.choices,
         default=enums.MoveNodePositionChoices.LAST_CHILD,
     )
+
+
+class CommentSerializer(serializers.ModelSerializer):
+    """Serialize comments."""
+
+    user = UserLightSerializer(read_only=True)
+    abilities = serializers.SerializerMethodField(read_only=True)
+
+    class Meta:
+        model = models.Comment
+        fields = [
+            "id",
+            "content",
+            "created_at",
+            "updated_at",
+            "user",
+            "document",
+            "abilities",
+        ]
+        read_only_fields = [
+            "id",
+            "created_at",
+            "updated_at",
+            "user",
+            "document",
+            "abilities",
+        ]
+
+    def get_abilities(self, comment) -> dict:
+        """Return abilities of the logged-in user on the instance."""
+        request = self.context.get("request")
+        if request:
+            return comment.get_abilities(request.user)
+        return {}
+
+    def validate(self, attrs):
+        """Validate invitation data."""
+        request = self.context.get("request")
+        user = getattr(request, "user", None)
+
+        attrs["document_id"] = self.context["resource_id"]
+        attrs["user_id"] = user.id if user else None
+
+        return attrs

src/backend/core/api/viewsets.py

@@ -455,9 +455,8 @@ class DocumentViewSet(
 
         # Annotate favorite status and filter if applicable as late as possible
         queryset = queryset.annotate_is_favorite(user)
-        queryset = filterset.filters["is_favorite"].filter(
-            queryset, filter_data["is_favorite"]
-        )
+        for field in ["is_favorite", "is_masked"]:
+            queryset = filterset.filters[field].filter(queryset, filter_data[field])
 
         # Apply ordering only now that everything is filtered and annotated
         queryset = filters.OrderingFilter().filter_queryset(
@@ -1109,15 +1108,50 @@ class DocumentViewSet(
             document=document, user=user
         ).delete()
         if deleted:
-            return drf.response.Response(
-                {"detail": "Document unmarked as favorite"},
-                status=drf.status.HTTP_204_NO_CONTENT,
-            )
+            return drf.response.Response(status=drf.status.HTTP_204_NO_CONTENT)
         return drf.response.Response(
             {"detail": "Document was already not marked as favorite"},
             status=drf.status.HTTP_200_OK,
         )
 
+    @drf.decorators.action(detail=True, methods=["post", "delete"], url_path="mask")
+    def mask(self, request, *args, **kwargs):
+        """Mask or unmask the document for the logged-in user based on the HTTP method."""
+        # Check permissions first
+        document = self.get_object()
+        user = request.user
+
+        try:
+            link_trace = models.LinkTrace.objects.get(document=document, user=user)
+        except models.LinkTrace.DoesNotExist:
+            return drf.response.Response(
+                {"detail": "User never accessed this document before."},
+                status=status.HTTP_400_BAD_REQUEST,
+            )
+
+        if request.method == "POST":
+            if link_trace.is_masked:
+                return drf.response.Response(
+                    {"detail": "Document was already masked"},
+                    status=drf.status.HTTP_200_OK,
+                )
+            link_trace.is_masked = True
+            link_trace.save(update_fields=["is_masked"])
+            return drf.response.Response(
+                {"detail": "Document was masked"},
+                status=drf.status.HTTP_201_CREATED,
+            )
+
+        # Handle DELETE method to unmask document
+        if not link_trace.is_masked:
+            return drf.response.Response(
+                {"detail": "Document was already not masked"},
+                status=drf.status.HTTP_200_OK,
+            )
+        link_trace.is_masked = False
+        link_trace.save(update_fields=["is_masked"])
+        return drf.response.Response(status=drf.status.HTTP_204_NO_CONTENT)
+
     @drf.decorators.action(detail=True, methods=["post"], url_path="attachment-upload")
     def attachment_upload(self, request, *args, **kwargs):
         """Upload a file related to a given document"""
@@ -2038,3 +2072,36 @@ class ConfigView(drf.views.APIView):
             )
 
         return theme_customization
+
+
+class CommentViewSet(
+    viewsets.ModelViewSet,
+):
+    """API ViewSet for comments."""
+
+    permission_classes = [permissions.CommentPermission]
+    queryset = models.Comment.objects.select_related("user", "document").all()
+    serializer_class = serializers.CommentSerializer
+    pagination_class = Pagination
+    _document = None
+
+    def get_document_or_404(self):
+        """Get the document related to the viewset or raise a 404 error."""
+        if self._document is None:
+            try:
+                self._document = models.Document.objects.get(
+                    pk=self.kwargs["resource_id"],
+                )
+            except models.Document.DoesNotExist as e:
+                raise drf.exceptions.NotFound("Document not found.") from e
+        return self._document
+
+    def get_serializer_context(self):
+        """Extra context provided to the serializer class."""
+        context = super().get_serializer_context()
+        context["resource_id"] = self.kwargs["resource_id"]
+        return context
+
+    def get_queryset(self):
+        """Return the queryset according to the action."""
+        return super().get_queryset().filter(document=self.kwargs["resource_id"])

src/backend/core/choices.py

@@ -33,6 +33,7 @@ class LinkRoleChoices(PriorityTextChoices):
     """Defines the possible roles a link can offer on a document."""
 
     READER = "reader", _("Reader")  # Can read
+    COMMENTATOR = "commentator", _("Commentator")  # Can read and comment
     EDITOR = "editor", _("Editor")  # Can read and edit
 
 
@@ -40,6 +41,7 @@ class RoleChoices(PriorityTextChoices):
     """Defines the possible roles a user can have in a resource."""
 
     READER = "reader", _("Reader")  # Can read
+    COMMENTATOR = "commentator", _("Commentator")  # Can read and comment
     EDITOR = "editor", _("Editor")  # Can read and edit
     ADMIN = "administrator", _("Administrator")  # Can read, edit, delete and share
     OWNER = "owner", _("Owner")

src/backend/core/factories.py

@@ -150,7 +150,7 @@ class DocumentFactory(factory.django.DjangoModelFactory):
         """Add link traces to document from a given list of users."""
         if create and extracted:
             for item in extracted:
-                models.LinkTrace.objects.create(document=self, user=item)
+                models.LinkTrace.objects.update_or_create(document=self, user=item)
 
     @factory.post_generation
     def favorited_by(self, create, extracted, **kwargs):
@@ -159,6 +159,15 @@ class DocumentFactory(factory.django.DjangoModelFactory):
             for item in extracted:
                 models.DocumentFavorite.objects.create(document=self, user=item)
 
+    @factory.post_generation
+    def masked_by(self, create, extracted, **kwargs):
+        """Mark document as masked by a list of users."""
+        if create and extracted:
+            for item in extracted:
+                models.LinkTrace.objects.update_or_create(
+                    document=self, user=item, defaults={"is_masked": True}
+                )
+
 
 class UserDocumentAccessFactory(factory.django.DjangoModelFactory):
     """Create fake document user accesses for testing."""
@@ -247,3 +256,14 @@ class InvitationFactory(factory.django.DjangoModelFactory):
     document = factory.SubFactory(DocumentFactory)
     role = factory.fuzzy.FuzzyChoice([role[0] for role in models.RoleChoices.choices])
     issuer = factory.SubFactory(UserFactory)
+
+
+class CommentFactory(factory.django.DjangoModelFactory):
+    """A factory to create comments for a document"""
+
+    class Meta:
+        model = models.Comment
+
+    document = factory.SubFactory(DocumentFactory)
+    user = factory.SubFactory(UserFactory)
+    content = factory.Faker("text")

src/backend/core/migrations/0024_add_is_masked_field_to_link_trace.py

@@ -0,0 +1,36 @@
+# Generated by Django 5.2.3 on 2025-07-13 08:22
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("core", "0023_remove_document_is_public_and_more"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="linktrace",
+            name="is_masked",
+            field=models.BooleanField(default=False),
+        ),
+        migrations.AlterField(
+            model_name="user",
+            name="language",
+            field=models.CharField(
+                blank=True,
+                choices=[
+                    ("en-us", "English"),
+                    ("fr-fr", "Français"),
+                    ("de-de", "Deutsch"),
+                    ("nl-nl", "Nederlands"),
+                    ("es-es", "Español"),
+                ],
+                default=None,
+                help_text="The language in which the user wants to see the interface.",
+                max_length=10,
+                null=True,
+                verbose_name="language",
+            ),
+        ),
+    ]

src/backend/core/migrations/0025_alter_document_link_role_alter_documentaccess_role_and_more.py

@@ -0,0 +1,146 @@
+# Generated by Django 5.2.4 on 2025-08-26 08:11
+
+import uuid
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("core", "0024_add_is_masked_field_to_link_trace"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="document",
+            name="link_role",
+            field=models.CharField(
+                choices=[
+                    ("reader", "Reader"),
+                    ("commentator", "Commentator"),
+                    ("editor", "Editor"),
+                ],
+                default="reader",
+                max_length=20,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="documentaccess",
+            name="role",
+            field=models.CharField(
+                choices=[
+                    ("reader", "Reader"),
+                    ("commentator", "Commentator"),
+                    ("editor", "Editor"),
+                    ("administrator", "Administrator"),
+                    ("owner", "Owner"),
+                ],
+                default="reader",
+                max_length=20,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="documentaskforaccess",
+            name="role",
+            field=models.CharField(
+                choices=[
+                    ("reader", "Reader"),
+                    ("commentator", "Commentator"),
+                    ("editor", "Editor"),
+                    ("administrator", "Administrator"),
+                    ("owner", "Owner"),
+                ],
+                default="reader",
+                max_length=20,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="invitation",
+            name="role",
+            field=models.CharField(
+                choices=[
+                    ("reader", "Reader"),
+                    ("commentator", "Commentator"),
+                    ("editor", "Editor"),
+                    ("administrator", "Administrator"),
+                    ("owner", "Owner"),
+                ],
+                default="reader",
+                max_length=20,
+            ),
+        ),
+        migrations.AlterField(
+            model_name="templateaccess",
+            name="role",
+            field=models.CharField(
+                choices=[
+                    ("reader", "Reader"),
+                    ("commentator", "Commentator"),
+                    ("editor", "Editor"),
+                    ("administrator", "Administrator"),
+                    ("owner", "Owner"),
+                ],
+                default="reader",
+                max_length=20,
+            ),
+        ),
+        migrations.CreateModel(
+            name="Comment",
+            fields=[
+                (
+                    "id",
+                    models.UUIDField(
+                        default=uuid.uuid4,
+                        editable=False,
+                        help_text="primary key for the record as UUID",
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="id",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True,
+                        help_text="date and time at which a record was created",
+                        verbose_name="created on",
+                    ),
+                ),
+                (
+                    "updated_at",
+                    models.DateTimeField(
+                        auto_now=True,
+                        help_text="date and time at which a record was last updated",
+                        verbose_name="updated on",
+                    ),
+                ),
+                ("content", models.TextField()),
+                (
+                    "document",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="comments",
+                        to="core.document",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.SET_NULL,
+                        related_name="comments",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "Comment",
+                "verbose_name_plural": "Comments",
+                "db_table": "impress_comment",
+                "ordering": ("-created_at",),
+            },
+        ),
+    ]

src/backend/core/models.py

@@ -762,6 +762,7 @@ class Document(MP_Node, BaseModel):
         can_update = (
             is_owner_or_admin or role == RoleChoices.EDITOR
         ) and not is_deleted
+        can_comment = (can_update or role == RoleChoices.COMMENTATOR) and not is_deleted
 
         ai_allow_reach_from = settings.AI_ALLOW_REACH_FROM
         ai_access = any(
@@ -786,6 +787,7 @@ class Document(MP_Node, BaseModel):
             "children_list": can_get,
             "children_create": can_update and user.is_authenticated,
             "collaboration_auth": can_get,
+            "comment": can_comment,
             "cors_proxy": can_get,
             "descendants": can_get,
             "destroy": is_owner,
@@ -793,6 +795,7 @@ class Document(MP_Node, BaseModel):
             "favorite": can_get and user.is_authenticated,
             "link_configuration": is_owner_or_admin,
             "invite_owner": is_owner,
+            "mask": can_get and user.is_authenticated,
             "move": is_owner_or_admin and not self.ancestors_deleted_at,
             "partial_update": can_update,
             "restore": is_owner,
@@ -958,6 +961,7 @@ class LinkTrace(BaseModel):
         related_name="link_traces",
     )
     user = models.ForeignKey(User, on_delete=models.CASCADE, related_name="link_traces")
+    is_masked = models.BooleanField(default=False)
 
     class Meta:
         db_table = "impress_link_trace"
@@ -1143,7 +1147,12 @@ class DocumentAccess(BaseAccess):
             set_role_to = []
             if is_owner_or_admin:
                 set_role_to.extend(
-                    [RoleChoices.READER, RoleChoices.EDITOR, RoleChoices.ADMIN]
+                    [
+                        RoleChoices.READER,
+                        RoleChoices.COMMENTATOR,
+                        RoleChoices.EDITOR,
+                        RoleChoices.ADMIN,
+                    ]
                 )
             if role == RoleChoices.OWNER:
                 set_role_to.append(RoleChoices.OWNER)
@@ -1275,6 +1284,48 @@ class DocumentAskForAccess(BaseModel):
         self.document.send_email(subject, [email], context, language)
 
 
+class Comment(BaseModel):
+    """User comment on a document."""
+
+    document = models.ForeignKey(
+        Document,
+        on_delete=models.CASCADE,
+        related_name="comments",
+    )
+    user = models.ForeignKey(
+        User,
+        on_delete=models.SET_NULL,
+        related_name="comments",
+        null=True,
+        blank=True,
+    )
+    content = models.TextField()
+
+    class Meta:
+        db_table = "impress_comment"
+        ordering = ("-created_at",)
+        verbose_name = _("Comment")
+        verbose_name_plural = _("Comments")
+
+    def __str__(self):
+        author = self.user or _("Anonymous")
+        return f"{author!s} on {self.document!s}"
+
+    def get_abilities(self, user):
+        """Compute and return abilities for a given user."""
+        role = self.document.get_role(user)
+        can_comment = self.document.get_abilities(user)["comment"]
+        return {
+            "destroy": self.user == user
+            or role in [RoleChoices.OWNER, RoleChoices.ADMIN],
+            "update": self.user == user
+            or role in [RoleChoices.OWNER, RoleChoices.ADMIN],
+            "partial_update": self.user == user
+            or role in [RoleChoices.OWNER, RoleChoices.ADMIN],
+            "retrieve": can_comment,
+        }
+
+
 class Template(BaseModel):
     """HTML and CSS code used for formatting the print around the MarkDown body."""
 

src/backend/core/tests/documents/test_api_document_accesses.py

@@ -292,6 +292,7 @@ def test_api_document_accesses_retrieve_set_role_to_child():
     }
     assert result_dict[str(document_access_other_user.id)] == [
         "reader",
+        "commentator",
         "editor",
         "administrator",
         "owner",
@@ -300,7 +301,7 @@ def test_api_document_accesses_retrieve_set_role_to_child():
 
     # Add an access for the other user on the parent
     parent_access_other_user = factories.UserDocumentAccessFactory(
-        document=parent, user=other_user, role="editor"
+        document=parent, user=other_user, role="commentator"
     )
 
     response = client.get(f"/api/v1.0/documents/{document.id!s}/accesses/")
@@ -313,6 +314,7 @@ def test_api_document_accesses_retrieve_set_role_to_child():
         result["id"]: result["abilities"]["set_role_to"] for result in content
     }
     assert result_dict[str(document_access_other_user.id)] == [
+        "commentator",
         "editor",
         "administrator",
         "owner",
@@ -320,6 +322,7 @@ def test_api_document_accesses_retrieve_set_role_to_child():
     assert result_dict[str(parent_access.id)] == []
     assert result_dict[str(parent_access_other_user.id)] == [
         "reader",
+        "commentator",
         "editor",
         "administrator",
         "owner",
@@ -332,28 +335,28 @@ def test_api_document_accesses_retrieve_set_role_to_child():
         [
             ["administrator", "reader", "reader", "reader"],
             [
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
                 [],
                 [],
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
             ],
         ],
         [
             ["owner", "reader", "reader", "reader"],
             [
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
                 [],
                 [],
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
             ],
         ],
         [
             ["owner", "reader", "reader", "owner"],
             [
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
                 [],
                 [],
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
             ],
         ],
     ],
@@ -414,44 +417,44 @@ def test_api_document_accesses_list_authenticated_related_same_user(roles, resul
         [
             ["administrator", "reader", "reader", "reader"],
             [
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
                 [],
                 [],
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
             ],
         ],
         [
             ["owner", "reader", "reader", "reader"],
             [
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
                 [],
                 [],
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
             ],
         ],
         [
             ["owner", "reader", "reader", "owner"],
             [
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
                 [],
                 [],
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
             ],
         ],
         [
             ["reader", "reader", "reader", "owner"],
             [
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
                 [],
                 [],
-                ["reader", "editor", "administrator", "owner"],
+                ["reader", "commentator", "editor", "administrator", "owner"],
             ],
         ],
         [
             ["reader", "administrator", "reader", "editor"],
             [
-                ["reader", "editor", "administrator"],
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
                 [],
                 [],
             ],
@@ -459,7 +462,7 @@ def test_api_document_accesses_list_authenticated_related_same_user(roles, resul
         [
             ["editor", "editor", "administrator", "editor"],
             [
-                ["reader", "editor", "administrator"],
+                ["reader", "commentator", "editor", "administrator"],
                 [],
                 ["editor", "administrator"],
                 [],

src/backend/core/tests/documents/test_api_documents_comments.py

@@ -0,0 +1,588 @@
+"""Test API for comments on documents."""
+
+import random
+
+from django.contrib.auth.models import AnonymousUser
+
+import pytest
+from rest_framework.test import APIClient
+
+from core import factories, models
+
+pytestmark = pytest.mark.django_db
+
+# List comments
+
+
+def test_list_comments_anonymous_user_public_document():
+    """Anonymous users should be allowed to list comments on a public document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    comment1, comment2 = factories.CommentFactory.create_batch(2, document=document)
+    # other comments not linked to the document
+    factories.CommentFactory.create_batch(2)
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/comments/")
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 2,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "id": str(comment2.id),
+                "content": comment2.content,
+                "created_at": comment2.created_at.isoformat().replace("+00:00", "Z"),
+                "updated_at": comment2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user": {
+                    "full_name": comment2.user.full_name,
+                    "short_name": comment2.user.short_name,
+                },
+                "document": str(comment2.document.id),
+                "abilities": comment2.get_abilities(AnonymousUser()),
+            },
+            {
+                "id": str(comment1.id),
+                "content": comment1.content,
+                "created_at": comment1.created_at.isoformat().replace("+00:00", "Z"),
+                "updated_at": comment1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user": {
+                    "full_name": comment1.user.full_name,
+                    "short_name": comment1.user.short_name,
+                },
+                "document": str(comment1.document.id),
+                "abilities": comment1.get_abilities(AnonymousUser()),
+            },
+        ],
+    }
+
+
+@pytest.mark.parametrize("link_reach", ["restricted", "authenticated"])
+def test_list_comments_anonymous_user_non_public_document(link_reach):
+    """Anonymous users should not be allowed to list comments on a non-public document."""
+    document = factories.DocumentFactory(
+        link_reach=link_reach, link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    factories.CommentFactory(document=document)
+    # other comments not linked to the document
+    factories.CommentFactory.create_batch(2)
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/comments/")
+    assert response.status_code == 401
+
+
+def test_list_comments_authenticated_user_accessible_document():
+    """Authenticated users should be allowed to list comments on an accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.COMMENTATOR)]
+    )
+    comment1 = factories.CommentFactory(document=document)
+    comment2 = factories.CommentFactory(document=document, user=user)
+    # other comments not linked to the document
+    factories.CommentFactory.create_batch(2)
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/comments/")
+    assert response.status_code == 200
+    assert response.json() == {
+        "count": 2,
+        "next": None,
+        "previous": None,
+        "results": [
+            {
+                "id": str(comment2.id),
+                "content": comment2.content,
+                "created_at": comment2.created_at.isoformat().replace("+00:00", "Z"),
+                "updated_at": comment2.updated_at.isoformat().replace("+00:00", "Z"),
+                "user": {
+                    "full_name": comment2.user.full_name,
+                    "short_name": comment2.user.short_name,
+                },
+                "document": str(comment2.document.id),
+                "abilities": comment2.get_abilities(user),
+            },
+            {
+                "id": str(comment1.id),
+                "content": comment1.content,
+                "created_at": comment1.created_at.isoformat().replace("+00:00", "Z"),
+                "updated_at": comment1.updated_at.isoformat().replace("+00:00", "Z"),
+                "user": {
+                    "full_name": comment1.user.full_name,
+                    "short_name": comment1.user.short_name,
+                },
+                "document": str(comment1.document.id),
+                "abilities": comment1.get_abilities(user),
+            },
+        ],
+    }
+
+
+def test_list_comments_authenticated_user_non_accessible_document():
+    """Authenticated users should not be allowed to list comments on a non-accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(link_reach="restricted")
+    factories.CommentFactory(document=document)
+    # other comments not linked to the document
+    factories.CommentFactory.create_batch(2)
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/comments/")
+    assert response.status_code == 403
+
+
+def test_list_comments_authenticated_user_not_enough_access():
+    """
+    Authenticated users should not be allowed to list comments on a document they don't have
+    comment access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.READER)]
+    )
+    factories.CommentFactory(document=document)
+    # other comments not linked to the document
+    factories.CommentFactory.create_batch(2)
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/comments/")
+    assert response.status_code == 403
+
+
+# Create comment
+
+
+def test_create_comment_anonymous_user_public_document():
+    """Anonymous users should not be allowed to create comments on a public document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    client = APIClient()
+    response = client.post(
+        f"/api/v1.0/documents/{document.id!s}/comments/", {"content": "test"}
+    )
+
+    assert response.status_code == 201
+
+    assert response.json() == {
+        "id": str(response.json()["id"]),
+        "content": "test",
+        "created_at": response.json()["created_at"],
+        "updated_at": response.json()["updated_at"],
+        "user": None,
+        "document": str(document.id),
+        "abilities": {
+            "destroy": False,
+            "update": False,
+            "partial_update": False,
+            "retrieve": True,
+        },
+    }
+
+
+def test_create_comment_anonymous_user_non_accessible_document():
+    """Anonymous users should not be allowed to create comments on a non-accessible document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.READER
+    )
+    client = APIClient()
+    response = client.post(
+        f"/api/v1.0/documents/{document.id!s}/comments/", {"content": "test"}
+    )
+
+    assert response.status_code == 401
+
+
+def test_create_comment_authenticated_user_accessible_document():
+    """Authenticated users should be allowed to create comments on an accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.COMMENTATOR)]
+    )
+    client = APIClient()
+    client.force_login(user)
+    response = client.post(
+        f"/api/v1.0/documents/{document.id!s}/comments/", {"content": "test"}
+    )
+    assert response.status_code == 201
+
+    assert response.json() == {
+        "id": str(response.json()["id"]),
+        "content": "test",
+        "created_at": response.json()["created_at"],
+        "updated_at": response.json()["updated_at"],
+        "user": {
+            "full_name": user.full_name,
+            "short_name": user.short_name,
+        },
+        "document": str(document.id),
+        "abilities": {
+            "destroy": True,
+            "update": True,
+            "partial_update": True,
+            "retrieve": True,
+        },
+    }
+
+
+def test_create_comment_authenticated_user_not_enough_access():
+    """
+    Authenticated users should not be allowed to create comments on a document they don't have
+    comment access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.READER)]
+    )
+    client = APIClient()
+    client.force_login(user)
+    response = client.post(
+        f"/api/v1.0/documents/{document.id!s}/comments/", {"content": "test"}
+    )
+    assert response.status_code == 403
+
+
+# Retrieve comment
+
+
+def test_retrieve_comment_anonymous_user_public_document():
+    """Anonymous users should be allowed to retrieve comments on a public document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 200
+    assert response.json() == {
+        "id": str(comment.id),
+        "content": comment.content,
+        "created_at": comment.created_at.isoformat().replace("+00:00", "Z"),
+        "updated_at": comment.updated_at.isoformat().replace("+00:00", "Z"),
+        "user": {
+            "full_name": comment.user.full_name,
+            "short_name": comment.user.short_name,
+        },
+        "document": str(comment.document.id),
+        "abilities": comment.get_abilities(AnonymousUser()),
+    }
+
+
+def test_retrieve_comment_anonymous_user_non_accessible_document():
+    """Anonymous users should not be allowed to retrieve comments on a non-accessible document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.READER
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 401
+
+
+def test_retrieve_comment_authenticated_user_accessible_document():
+    """Authenticated users should be allowed to retrieve comments on an accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.COMMENTATOR)]
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    client.force_login(user)
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 200
+
+
+def test_retrieve_comment_authenticated_user_not_enough_access():
+    """
+    Authenticated users should not be allowed to retrieve comments on a document they don't have
+    comment access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.READER)]
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    client.force_login(user)
+    response = client.get(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 403
+
+
+# Update comment
+
+
+def test_update_comment_anonymous_user_public_document():
+    """Anonymous users should not be allowed to update comments on a public document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 401
+
+
+def test_update_comment_anonymous_user_non_accessible_document():
+    """Anonymous users should not be allowed to update comments on a non-accessible document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.READER
+    )
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 401
+
+
+def test_update_comment_authenticated_user_accessible_document():
+    """Authenticated users should not be able to update comments not their own."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted",
+        users=[
+            (
+                user,
+                random.choice(
+                    [models.LinkRoleChoices.COMMENTATOR, models.LinkRoleChoices.EDITOR]
+                ),
+            )
+        ],
+    )
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    client.force_login(user)
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 403
+
+
+def test_update_comment_authenticated_user_own_comment():
+    """Authenticated users should be able to update comments not their own."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted",
+        users=[
+            (
+                user,
+                random.choice(
+                    [models.LinkRoleChoices.COMMENTATOR, models.LinkRoleChoices.EDITOR]
+                ),
+            )
+        ],
+    )
+    comment = factories.CommentFactory(document=document, content="test", user=user)
+    client = APIClient()
+    client.force_login(user)
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 200
+
+    comment.refresh_from_db()
+    assert comment.content == "other content"
+
+
+def test_update_comment_authenticated_user_not_enough_access():
+    """
+    Authenticated users should not be allowed to update comments on a document they don't
+    have comment access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.READER)]
+    )
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    client.force_login(user)
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 403
+
+
+def test_update_comment_authenticated_no_access():
+    """
+    Authenticated users should not be allowed to update comments on a document they don't
+    have access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(link_reach="restricted")
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    client.force_login(user)
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 403
+
+
+@pytest.mark.parametrize("role", [models.RoleChoices.ADMIN, models.RoleChoices.OWNER])
+def test_update_comment_authenticated_admin_or_owner_can_update_any_comment(role):
+    """
+    Authenticated users should be able to update comments on a document they don't have access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, role)])
+    comment = factories.CommentFactory(document=document, content="test")
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 200
+
+    comment.refresh_from_db()
+    assert comment.content == "other content"
+
+
+@pytest.mark.parametrize("role", [models.RoleChoices.ADMIN, models.RoleChoices.OWNER])
+def test_update_comment_authenticated_admin_or_owner_can_update_own_comment(role):
+    """
+    Authenticated users should be able to update comments on a document they don't have access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, role)])
+    comment = factories.CommentFactory(document=document, content="test", user=user)
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/",
+        {"content": "other content"},
+    )
+    assert response.status_code == 200
+
+    comment.refresh_from_db()
+    assert comment.content == "other content"
+
+
+# Delete comment
+
+
+def test_delete_comment_anonymous_user_public_document():
+    """Anonymous users should not be allowed to delete comments on a public document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.COMMENTATOR
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 401
+
+
+def test_delete_comment_anonymous_user_non_accessible_document():
+    """Anonymous users should not be allowed to delete comments on a non-accessible document."""
+    document = factories.DocumentFactory(
+        link_reach="public", link_role=models.LinkRoleChoices.READER
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 401
+
+
+def test_delete_comment_authenticated_user_accessible_document_own_comment():
+    """Authenticated users should be able to delete comments on an accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.COMMENTATOR)]
+    )
+    comment = factories.CommentFactory(document=document, user=user)
+    client = APIClient()
+    client.force_login(user)
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 204
+
+
+def test_delete_comment_authenticated_user_accessible_document_not_own_comment():
+    """Authenticated users should not be able to delete comments on an accessible document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.COMMENTATOR)]
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    client.force_login(user)
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 403
+
+
+@pytest.mark.parametrize("role", [models.RoleChoices.ADMIN, models.RoleChoices.OWNER])
+def test_delete_comment_authenticated_user_admin_or_owner_can_delete_any_comment(role):
+    """Authenticated users should be able to delete comments on a document they have access to."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, role)])
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    client.force_login(user)
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 204
+
+
+@pytest.mark.parametrize("role", [models.RoleChoices.ADMIN, models.RoleChoices.OWNER])
+def test_delete_comment_authenticated_user_admin_or_owner_can_delete_own_comment(role):
+    """Authenticated users should be able to delete comments on a document they have access to."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, role)])
+    comment = factories.CommentFactory(document=document, user=user)
+    client = APIClient()
+    client.force_login(user)
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 204
+
+
+def test_delete_comment_authenticated_user_not_enough_access():
+    """
+    Authenticated users should not be able to delete comments on a document they don't
+    have access to.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_reach="restricted", users=[(user, models.LinkRoleChoices.READER)]
+    )
+    comment = factories.CommentFactory(document=document)
+    client = APIClient()
+    client.force_login(user)
+    response = client.delete(
+        f"/api/v1.0/documents/{document.id!s}/comments/{comment.id!s}/"
+    )
+    assert response.status_code == 403

src/backend/core/tests/documents/test_api_documents_favorite.py

@@ -45,7 +45,10 @@ def test_api_document_favorite_anonymous_user(method, reach):
     ],
 )
 def test_api_document_favorite_authenticated_post_allowed(reach, has_role):
-    """Authenticated users should be able to mark a document as favorite using POST."""
+    """
+    Authenticated users should be able to mark a document to which they have access
+    as favorite using POST.
+    """
     user = factories.UserFactory()
     document = factories.DocumentFactory(link_reach=reach)
     client = APIClient()
@@ -69,7 +72,10 @@ def test_api_document_favorite_authenticated_post_allowed(reach, has_role):
 
 
 def test_api_document_favorite_authenticated_post_forbidden():
-    """Authenticated users should be able to mark a document as favorite using POST."""
+    """
+    Authenticated users should not be allowed to mark a document to which they don't
+    have access as favorite using POST.
+    """
     user = factories.UserFactory()
     document = factories.DocumentFactory(link_reach="restricted")
     client = APIClient()

src/backend/core/tests/documents/test_api_documents_favorite_list.py

@@ -41,8 +41,8 @@ def test_api_document_favorite_list_authenticated_with_favorite():
     client = APIClient()
     client.force_login(user)
 
-    # User don't have access to this document, let say it had access and this access has been
-    # removed. It should not be in the favorite list anymore.
+    # If the user doesn't have access to this document (e.g the user had access
+    # and this access was removed), it should not be in the favorite list anymore.
     factories.DocumentFactory(favorited_by=[user])
 
     document = factories.UserDocumentAccessFactory(

src/backend/core/tests/documents/test_api_documents_list_filters.py

@@ -312,6 +312,84 @@ def test_api_documents_list_filter_is_favorite_invalid():
     assert len(results) == 5
 
 
+# Filters: is_masked
+
+
+def test_api_documents_list_filter_is_masked_true():
+    """
+    Authenticated users should be able to filter documents they marked as masked.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    factories.DocumentFactory.create_batch(2, users=[user])
+    masked_documents = factories.DocumentFactory.create_batch(
+        3, users=[user], masked_by=[user]
+    )
+    unmasked_documents = factories.DocumentFactory.create_batch(2, users=[user])
+    for document in unmasked_documents:
+        models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+
+    response = client.get("/api/v1.0/documents/?is_masked=true")
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert len(results) == 3
+
+    # Ensure all results are marked as masked by the current user
+    masked_documents_ids = [str(doc.id) for doc in masked_documents]
+    for result in results:
+        assert result["id"] in masked_documents_ids
+
+
+def test_api_documents_list_filter_is_masked_false():
+    """
+    Authenticated users should be able to filter documents they didn't mark as masked.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    factories.DocumentFactory.create_batch(2, users=[user])
+    masked_documents = factories.DocumentFactory.create_batch(
+        3, users=[user], masked_by=[user]
+    )
+    unmasked_documents = factories.DocumentFactory.create_batch(2, users=[user])
+    for document in unmasked_documents:
+        models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+
+    response = client.get("/api/v1.0/documents/?is_masked=false")
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert len(results) == 4
+
+    # Ensure all results are not marked as masked by the current user
+    masked_documents_ids = [str(doc.id) for doc in masked_documents]
+    for result in results:
+        assert result["id"] not in masked_documents_ids
+
+
+def test_api_documents_list_filter_is_masked_invalid():
+    """Filtering with an invalid `is_masked` value should do nothing."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    factories.DocumentFactory.create_batch(2, users=[user])
+    factories.DocumentFactory.create_batch(3, users=[user], masked_by=[user])
+    unmasked_documents = factories.DocumentFactory.create_batch(2, users=[user])
+    for document in unmasked_documents:
+        models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+
+    response = client.get("/api/v1.0/documents/?is_masked=invalid")
+
+    assert response.status_code == 200
+    results = response.json()["results"]
+    assert len(results) == 7
+
+
 # Filters: title
 
 

src/backend/core/tests/documents/test_api_documents_mask.py

@@ -0,0 +1,353 @@
+"""Test mask document API endpoint for users in impress's core app."""
+
+import pytest
+from rest_framework.test import APIClient
+
+from core import factories, models
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.mark.parametrize(
+    "reach",
+    [
+        "restricted",
+        "authenticated",
+        "public",
+    ],
+)
+@pytest.mark.parametrize("method", ["post", "delete"])
+def test_api_document_mask_anonymous_user(method, reach):
+    """Anonymous users should not be able to mask/unmask documents."""
+    document = factories.DocumentFactory(link_reach=reach)
+
+    response = getattr(APIClient(), method)(
+        f"/api/v1.0/documents/{document.id!s}/mask/"
+    )
+
+    assert response.status_code == 401
+    assert response.json() == {
+        "detail": "Authentication credentials were not provided."
+    }
+
+    # Verify in database
+    assert models.LinkTrace.objects.exists() is False
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_post_allowed(reach, has_role):
+    """Authenticated users should be able to mask a document to which they have access."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach)
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+
+    # Try masking the document without a link trace
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+    assert response.status_code == 400
+    assert response.json() == {"detail": "User never accessed this document before."}
+    assert not models.LinkTrace.objects.filter(document=document, user=user).exists()
+
+    models.LinkTrace.objects.create(document=document, user=user)
+    # Mask document
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 201
+    assert response.json() == {"detail": "Document was masked"}
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=True
+    ).exists()
+
+
+def test_api_document_mask_authenticated_post_forbidden():
+    """
+    Authenticated users should no be allowed to mask a document
+    to which they don't have access.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+
+    # Try masking
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+
+    # Verify in database
+    assert (
+        models.LinkTrace.objects.filter(document=document, user=user).exists() is False
+    )
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_post_already_masked_allowed(reach, has_role):
+    """POST should not create duplicate link trace if already marked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach, masked_by=[user])
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+
+    # Try masking again
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 200
+    assert response.json() == {"detail": "Document was already masked"}
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=True
+    ).exists()
+
+
+def test_api_document_mask_authenticated_post_already_masked_forbidden():
+    """POST should not create duplicate masks if already marked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted", masked_by=[user])
+    # Try masking again
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+    assert models.LinkTrace.objects.filter(document=document, user=user).exists()
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_post_unmasked_allowed(reach, has_role):
+    """POST should not create duplicate link trace if unmasked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach)
+    models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+
+    # Try masking again
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 201
+    assert response.json() == {"detail": "Document was masked"}
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=True
+    ).exists()
+
+
+def test_api_document_mask_authenticated_post_unmasked_forbidden():
+    """POST should not create duplicate masks if unmasked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+    models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+    # Try masking again
+    response = client.post(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=False
+    ).exists()
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_delete_allowed(reach, has_role):
+    """Authenticated users should be able to unmask a document using DELETE."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach, masked_by=[user])
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+
+    # Unmask document
+    response = client.delete(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 204
+    assert response.content == b""  # No body
+    assert response.text == ""  # Empty decoded text
+    assert "Content-Type" not in response.headers  # No Content-Type for 204
+
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=False
+    ).exists()
+
+
+def test_api_document_mask_authenticated_delete_forbidden():
+    """
+    Authenticated users should not be allowed to unmask a document if
+    they don't have access to it.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted", masked_by=[user])
+
+    # Unmask document
+    response = client.delete(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=True
+    ).exists()
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_delete_not_masked_allowed(reach, has_role):
+    """DELETE should be idempotent if the document is not masked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach)
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+
+    # Try unmasking the document without a link trace
+    response = client.delete(f"/api/v1.0/documents/{document.id!s}/mask/")
+    assert response.status_code == 400
+    assert response.json() == {"detail": "User never accessed this document before."}
+    assert not models.LinkTrace.objects.filter(document=document, user=user).exists()
+
+    models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+    # Unmask document
+    response = client.delete(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 200
+    assert response.json() == {"detail": "Document was already not masked"}
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=False
+    ).exists()
+
+
+def test_api_document_mask_authenticated_delete_not_masked_forbidden():
+    """DELETE should be idempotent if the document is not masked."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach="restricted")
+
+    # Try to unmask when no entry exists
+    response = client.delete(f"/api/v1.0/documents/{document.id!s}/mask/")
+
+    assert response.status_code == 403
+    assert response.json() == {
+        "detail": "You do not have permission to perform this action."
+    }
+    assert (
+        models.LinkTrace.objects.filter(document=document, user=user).exists() is False
+    )
+
+
+@pytest.mark.parametrize(
+    "reach, has_role",
+    [
+        ["restricted", True],
+        ["authenticated", False],
+        ["authenticated", True],
+        ["public", False],
+        ["public", True],
+    ],
+)
+def test_api_document_mask_authenticated_post_unmark_then_mark_again_allowed(
+    reach, has_role
+):
+    """A user should be able to mask, unmask, and mask a document again."""
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(link_reach=reach)
+    if has_role:
+        models.DocumentAccess.objects.create(document=document, user=user)
+    models.LinkTrace.objects.create(document=document, user=user, is_masked=False)
+
+    url = f"/api/v1.0/documents/{document.id!s}/mask/"
+
+    # Mask document
+    response = client.post(url)
+    assert response.status_code == 201
+
+    # Unmask document
+    response = client.delete(url)
+    assert response.status_code == 204
+    assert response.content == b""  # No body
+    assert response.text == ""  # Empty decoded text
+    assert "Content-Type" not in response.headers  # No Content-Type for 204
+
+    # Mask document again
+    response = client.post(url)
+    assert response.status_code == 201
+    assert response.json() == {"detail": "Document was masked"}
+
+    assert models.LinkTrace.objects.filter(
+        document=document, user=user, is_masked=True
+    ).exists()

src/backend/core/tests/documents/test_api_documents_retrieve.py

@@ -36,6 +36,7 @@ def test_api_documents_retrieve_anonymous_public_standalone():
             "children_create": False,
             "children_list": True,
             "collaboration_auth": True,
+            "comment": document.link_role in ["commentator", "editor"],
             "cors_proxy": True,
             "descendants": True,
             "destroy": False,
@@ -45,10 +46,11 @@ def test_api_documents_retrieve_anonymous_public_standalone():
             "invite_owner": False,
             "link_configuration": False,
             "link_select_options": {
-                "authenticated": ["reader", "editor"],
-                "public": ["reader", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
+                "public": ["reader", "commentator", "editor"],
                 "restricted": None,
             },
+            "mask": False,
             "media_auth": True,
             "media_check": True,
             "move": False,
@@ -110,6 +112,7 @@ def test_api_documents_retrieve_anonymous_public_parent():
             "children_create": False,
             "children_list": True,
             "collaboration_auth": True,
+            "comment": grand_parent.link_role in ["commentator", "editor"],
             "descendants": True,
             "cors_proxy": True,
             "destroy": False,
@@ -121,6 +124,7 @@ def test_api_documents_retrieve_anonymous_public_parent():
             "link_select_options": models.LinkReachChoices.get_select_options(
                 **links_definition
             ),
+            "mask": False,
             "media_auth": True,
             "media_check": True,
             "move": False,
@@ -214,6 +218,7 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
             "children_create": document.link_role == "editor",
             "children_list": True,
             "collaboration_auth": True,
+            "comment": document.link_role in ["commentator", "editor"],
             "descendants": True,
             "cors_proxy": True,
             "destroy": False,
@@ -222,10 +227,11 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
             "invite_owner": False,
             "link_configuration": False,
             "link_select_options": {
-                "authenticated": ["reader", "editor"],
-                "public": ["reader", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
+                "public": ["reader", "commentator", "editor"],
                 "restricted": None,
             },
+            "mask": True,
             "media_auth": True,
             "media_check": True,
             "move": False,
@@ -295,6 +301,7 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
             "children_create": grand_parent.link_role == "editor",
             "children_list": True,
             "collaboration_auth": True,
+            "comment": grand_parent.link_role in ["commentator", "editor"],
             "descendants": True,
             "cors_proxy": True,
             "destroy": False,
@@ -305,6 +312,7 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
             "link_select_options": models.LinkReachChoices.get_select_options(
                 **links_definition
             ),
+            "mask": True,
             "move": False,
             "media_auth": True,
             "media_check": True,
@@ -484,10 +492,11 @@ def test_api_documents_retrieve_authenticated_related_parent():
             "ai_transform": access.role != "reader",
             "ai_translate": access.role != "reader",
             "attachment_upload": access.role != "reader",
-            "can_edit": access.role != "reader",
+            "can_edit": access.role not in ["reader", "commentator"],
             "children_create": access.role != "reader",
             "children_list": True,
             "collaboration_auth": True,
+            "comment": access.role != "reader",
             "descendants": True,
             "cors_proxy": True,
             "destroy": access.role == "owner",
@@ -498,6 +507,7 @@ def test_api_documents_retrieve_authenticated_related_parent():
             "link_select_options": models.LinkReachChoices.get_select_options(
                 **link_definition
             ),
+            "mask": True,
             "media_auth": True,
             "media_check": True,
             "move": access.role in ["administrator", "owner"],

src/backend/core/tests/documents/test_api_documents_trashbin.py

@@ -79,18 +79,20 @@ def test_api_documents_trashbin_format():
             "children_create": True,
             "children_list": True,
             "collaboration_auth": True,
-            "descendants": True,
+            "comment": True,
             "cors_proxy": True,
+            "descendants": True,
             "destroy": True,
             "duplicate": True,
             "favorite": True,
             "invite_owner": True,
             "link_configuration": True,
             "link_select_options": {
-                "authenticated": ["reader", "editor"],
-                "public": ["reader", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
+                "public": ["reader", "commentator", "editor"],
                 "restricted": None,
             },
+            "mask": True,
             "media_auth": True,
             "media_check": True,
             "move": False,  # Can't move a deleted document

src/backend/core/tests/test_models_comment.py

@@ -0,0 +1,273 @@
+"""Test the comment model."""
+
+import random
+
+from django.contrib.auth.models import AnonymousUser
+
+import pytest
+
+from core import factories
+from core.models import LinkReachChoices, LinkRoleChoices, RoleChoices
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.mark.parametrize(
+    "role,can_comment",
+    [
+        (LinkRoleChoices.READER, False),
+        (LinkRoleChoices.COMMENTATOR, True),
+        (LinkRoleChoices.EDITOR, True),
+    ],
+)
+def test_comment_get_abilities_anonymous_user_public_document(role, can_comment):
+    """Anonymous users cannot comment on a document."""
+    document = factories.DocumentFactory(
+        link_role=role, link_reach=LinkReachChoices.PUBLIC
+    )
+    comment = factories.CommentFactory(document=document)
+    user = AnonymousUser()
+
+    assert comment.get_abilities(user) == {
+        "destroy": False,
+        "update": False,
+        "partial_update": False,
+        "retrieve": can_comment,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_reach", [LinkReachChoices.RESTRICTED, LinkReachChoices.AUTHENTICATED]
+)
+def test_comment_get_abilities_anonymous_user_restricted_document(link_reach):
+    """Anonymous users cannot comment on a restricted document."""
+    document = factories.DocumentFactory(link_reach=link_reach)
+    comment = factories.CommentFactory(document=document)
+    user = AnonymousUser()
+
+    assert comment.get_abilities(user) == {
+        "destroy": False,
+        "update": False,
+        "partial_update": False,
+        "retrieve": False,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach,can_comment",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC, True),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC, True),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED, True),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED, True),
+    ],
+)
+def test_comment_get_abilities_user_reader(link_role, link_reach, can_comment):
+    """Readers cannot comment on a document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role, link_reach=link_reach, users=[(user, RoleChoices.READER)]
+    )
+    comment = factories.CommentFactory(document=document)
+
+    assert comment.get_abilities(user) == {
+        "destroy": False,
+        "update": False,
+        "partial_update": False,
+        "retrieve": can_comment,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach,can_comment",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC, True),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC, True),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED, False),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED, False),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED, True),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED, True),
+    ],
+)
+def test_comment_get_abilities_user_reader_own_comment(
+    link_role, link_reach, can_comment
+):
+    """User with reader role on a document has all accesses to its own comment."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role, link_reach=link_reach, users=[(user, RoleChoices.READER)]
+    )
+    comment = factories.CommentFactory(
+        document=document, user=user if can_comment else None
+    )
+
+    assert comment.get_abilities(user) == {
+        "destroy": can_comment,
+        "update": can_comment,
+        "partial_update": can_comment,
+        "retrieve": can_comment,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED),
+    ],
+)
+def test_comment_get_abilities_user_commentator(link_role, link_reach):
+    """Commentators can comment on a document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role,
+        link_reach=link_reach,
+        users=[(user, RoleChoices.COMMENTATOR)],
+    )
+    comment = factories.CommentFactory(document=document)
+
+    assert comment.get_abilities(user) == {
+        "destroy": False,
+        "update": False,
+        "partial_update": False,
+        "retrieve": True,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED),
+    ],
+)
+def test_comment_get_abilities_user_commentator_own_comment(link_role, link_reach):
+    """Commentators have all accesses to its own comment."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role,
+        link_reach=link_reach,
+        users=[(user, RoleChoices.COMMENTATOR)],
+    )
+    comment = factories.CommentFactory(document=document, user=user)
+
+    assert comment.get_abilities(user) == {
+        "destroy": True,
+        "update": True,
+        "partial_update": True,
+        "retrieve": True,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED),
+    ],
+)
+def test_comment_get_abilities_user_editor(link_role, link_reach):
+    """Editors can comment on a document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role, link_reach=link_reach, users=[(user, RoleChoices.EDITOR)]
+    )
+    comment = factories.CommentFactory(document=document)
+
+    assert comment.get_abilities(user) == {
+        "destroy": False,
+        "update": False,
+        "partial_update": False,
+        "retrieve": True,
+    }
+
+
+@pytest.mark.parametrize(
+    "link_role,link_reach",
+    [
+        (LinkRoleChoices.READER, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.PUBLIC),
+        (LinkRoleChoices.READER, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.RESTRICTED),
+        (LinkRoleChoices.READER, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.COMMENTATOR, LinkReachChoices.AUTHENTICATED),
+        (LinkRoleChoices.EDITOR, LinkReachChoices.AUTHENTICATED),
+    ],
+)
+def test_comment_get_abilities_user_editor_own_comment(link_role, link_reach):
+    """Editors have all accesses to its own comment."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(
+        link_role=link_role, link_reach=link_reach, users=[(user, RoleChoices.EDITOR)]
+    )
+    comment = factories.CommentFactory(document=document, user=user)
+
+    assert comment.get_abilities(user) == {
+        "destroy": True,
+        "update": True,
+        "partial_update": True,
+        "retrieve": True,
+    }
+
+
+def test_comment_get_abilities_user_admin():
+    """Admins have all accesses to a comment."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, RoleChoices.ADMIN)])
+    comment = factories.CommentFactory(
+        document=document, user=random.choice([user, None])
+    )
+
+    assert comment.get_abilities(user) == {
+        "destroy": True,
+        "update": True,
+        "partial_update": True,
+        "retrieve": True,
+    }
+
+
+def test_comment_get_abilities_user_owner():
+    """Owners have all accesses to a comment."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, RoleChoices.OWNER)])
+    comment = factories.CommentFactory(
+        document=document, user=random.choice([user, None])
+    )
+
+    assert comment.get_abilities(user) == {
+        "destroy": True,
+        "update": True,
+        "partial_update": True,
+        "retrieve": True,
+    }

src/backend/core/tests/test_models_document_accesses.py

@@ -123,7 +123,7 @@ def test_models_document_access_get_abilities_for_owner_of_self_allowed():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -166,7 +166,7 @@ def test_models_document_access_get_abilities_for_owner_of_self_last_on_child(
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -183,7 +183,7 @@ def test_models_document_access_get_abilities_for_owner_of_owner():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -200,7 +200,7 @@ def test_models_document_access_get_abilities_for_owner_of_administrator():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -217,7 +217,7 @@ def test_models_document_access_get_abilities_for_owner_of_editor():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -234,7 +234,7 @@ def test_models_document_access_get_abilities_for_owner_of_reader():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator", "owner"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator", "owner"],
     }
 
 
@@ -271,7 +271,7 @@ def test_models_document_access_get_abilities_for_administrator_of_administrator
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator"],
     }
 
 
@@ -288,7 +288,7 @@ def test_models_document_access_get_abilities_for_administrator_of_editor():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator"],
     }
 
 
@@ -305,7 +305,7 @@ def test_models_document_access_get_abilities_for_administrator_of_reader():
         "retrieve": True,
         "update": True,
         "partial_update": True,
-        "set_role_to": ["reader", "editor", "administrator"],
+        "set_role_to": ["reader", "commentator", "editor", "administrator"],
     }
 
 

src/backend/core/tests/test_models_documents.py

@@ -134,10 +134,13 @@ def test_models_documents_soft_delete(depth):
     [
         (True, "restricted", "reader"),
         (True, "restricted", "editor"),
+        (True, "restricted", "commentator"),
         (False, "restricted", "reader"),
         (False, "restricted", "editor"),
+        (False, "restricted", "commentator"),
         (False, "authenticated", "reader"),
         (False, "authenticated", "editor"),
+        (False, "authenticated", "commentator"),
     ],
 )
 def test_models_documents_get_abilities_forbidden(
@@ -164,14 +167,16 @@ def test_models_documents_get_abilities_forbidden(
         "destroy": False,
         "duplicate": False,
         "favorite": False,
+        "comment": False,
         "invite_owner": False,
+        "mask": False,
         "media_auth": False,
         "media_check": False,
         "move": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
         "partial_update": False,
@@ -221,6 +226,7 @@ def test_models_documents_get_abilities_reader(
         "children_create": False,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": False,
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -229,10 +235,80 @@ def test_models_documents_get_abilities_reader(
         "invite_owner": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": is_authenticated,
+        "media_auth": True,
+        "media_check": True,
+        "move": False,
+        "partial_update": False,
+        "restore": False,
+        "retrieve": True,
+        "tree": True,
+        "update": False,
+        "versions_destroy": False,
+        "versions_list": False,
+        "versions_retrieve": False,
+    }
+    nb_queries = 1 if is_authenticated else 0
+    with django_assert_num_queries(nb_queries):
+        assert document.get_abilities(user) == expected_abilities
+
+    document.soft_delete()
+    document.refresh_from_db()
+    assert all(
+        value is False
+        for key, value in document.get_abilities(user).items()
+        if key not in ["link_select_options", "ancestors_links_definition"]
+    )
+
+
+@override_settings(
+    AI_ALLOW_REACH_FROM=random.choice(["public", "authenticated", "restricted"])
+)
+@pytest.mark.parametrize(
+    "is_authenticated,reach",
+    [
+        (True, "public"),
+        (False, "public"),
+        (True, "authenticated"),
+    ],
+)
+def test_models_documents_get_abilities_commentator(
+    is_authenticated, reach, django_assert_num_queries
+):
+    """
+    Check abilities returned for a document giving commentator role to link holders
+    i.e anonymous users or authenticated users who have no specific role on the document.
+    """
+    document = factories.DocumentFactory(link_reach=reach, link_role="commentator")
+    user = factories.UserFactory() if is_authenticated else AnonymousUser()
+    expected_abilities = {
+        "accesses_manage": False,
+        "accesses_view": False,
+        "ai_transform": False,
+        "ai_translate": False,
+        "attachment_upload": False,
+        "can_edit": False,
+        "children_create": False,
+        "children_list": True,
+        "collaboration_auth": True,
+        "comment": True,
+        "descendants": True,
+        "cors_proxy": True,
+        "destroy": False,
+        "duplicate": is_authenticated,
+        "favorite": is_authenticated,
+        "invite_owner": False,
+        "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
+            "restricted": None,
+        },
+        "mask": is_authenticated,
         "media_auth": True,
         "media_check": True,
         "move": False,
@@ -285,6 +361,7 @@ def test_models_documents_get_abilities_editor(
         "children_create": is_authenticated,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": True,
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -293,10 +370,11 @@ def test_models_documents_get_abilities_editor(
         "invite_owner": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": is_authenticated,
         "media_auth": True,
         "media_check": True,
         "move": False,
@@ -338,6 +416,7 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": True,
         "descendants": True,
         "cors_proxy": True,
         "destroy": True,
@@ -346,10 +425,11 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
         "invite_owner": True,
         "link_configuration": True,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": True,
         "media_auth": True,
         "media_check": True,
         "move": True,
@@ -388,6 +468,7 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": True,
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -396,10 +477,11 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
         "invite_owner": False,
         "link_configuration": True,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": True,
         "media_auth": True,
         "media_check": True,
         "move": True,
@@ -441,6 +523,7 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
         "children_create": True,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": True,
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -449,10 +532,11 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
         "invite_owner": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": True,
         "media_auth": True,
         "media_check": True,
         "move": False,
@@ -501,6 +585,8 @@ def test_models_documents_get_abilities_reader_user(
         "children_create": access_from_link,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": document.link_reach != "restricted"
+        and document.link_role in ["commentator", "editor"],
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -509,10 +595,75 @@ def test_models_documents_get_abilities_reader_user(
         "invite_owner": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": True,
+        "media_auth": True,
+        "media_check": True,
+        "move": False,
+        "partial_update": access_from_link,
+        "restore": False,
+        "retrieve": True,
+        "tree": True,
+        "update": access_from_link,
+        "versions_destroy": False,
+        "versions_list": True,
+        "versions_retrieve": True,
+    }
+
+    with override_settings(AI_ALLOW_REACH_FROM=ai_access_setting):
+        with django_assert_num_queries(1):
+            assert document.get_abilities(user) == expected_abilities
+
+        document.soft_delete()
+        document.refresh_from_db()
+        assert all(
+            value is False
+            for key, value in document.get_abilities(user).items()
+            if key not in ["link_select_options", "ancestors_links_definition"]
+        )
+
+
+@pytest.mark.parametrize("ai_access_setting", ["public", "authenticated", "restricted"])
+def test_models_documents_get_abilities_commentator_user(
+    ai_access_setting, django_assert_num_queries
+):
+    """Check abilities returned for the commentator of a document."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, "commentator")])
+
+    access_from_link = (
+        document.link_reach != "restricted" and document.link_role == "editor"
+    )
+
+    expected_abilities = {
+        "accesses_manage": False,
+        "accesses_view": True,
+        # If you get your editor rights from the link role and not your access role
+        # You should not access AI if it's restricted to users with specific access
+        "ai_transform": access_from_link and ai_access_setting != "restricted",
+        "ai_translate": access_from_link and ai_access_setting != "restricted",
+        "attachment_upload": access_from_link,
+        "can_edit": access_from_link,
+        "children_create": access_from_link,
+        "children_list": True,
+        "collaboration_auth": True,
+        "comment": True,
+        "descendants": True,
+        "cors_proxy": True,
+        "destroy": False,
+        "duplicate": True,
+        "favorite": True,
+        "invite_owner": False,
+        "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
+            "restricted": None,
+        },
+        "mask": True,
         "media_auth": True,
         "media_check": True,
         "move": False,
@@ -559,6 +710,7 @@ def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
         "children_create": False,
         "children_list": True,
         "collaboration_auth": True,
+        "comment": False,
         "descendants": True,
         "cors_proxy": True,
         "destroy": False,
@@ -567,10 +719,11 @@ def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
         "invite_owner": False,
         "link_configuration": False,
         "link_select_options": {
-            "authenticated": ["reader", "editor"],
-            "public": ["reader", "editor"],
+            "authenticated": ["reader", "commentator", "editor"],
+            "public": ["reader", "commentator", "editor"],
             "restricted": None,
         },
+        "mask": True,
         "media_auth": True,
         "media_check": True,
         "move": False,
@@ -1190,7 +1343,14 @@ def test_models_documents_restore_complex_bis(django_assert_num_queries):
             "public",
             "reader",
             {
-                "public": ["reader", "editor"],
+                "public": ["reader", "commentator", "editor"],
+            },
+        ),
+        (
+            "public",
+            "commentator",
+            {
+                "public": ["commentator", "editor"],
             },
         ),
         ("public", "editor", {"public": ["editor"]}),
@@ -1198,8 +1358,16 @@ def test_models_documents_restore_complex_bis(django_assert_num_queries):
             "authenticated",
             "reader",
             {
-                "authenticated": ["reader", "editor"],
-                "public": ["reader", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
+                "public": ["reader", "commentator", "editor"],
+            },
+        ),
+        (
+            "authenticated",
+            "commentator",
+            {
+                "authenticated": ["commentator", "editor"],
+                "public": ["commentator", "editor"],
             },
         ),
         (
@@ -1212,8 +1380,17 @@ def test_models_documents_restore_complex_bis(django_assert_num_queries):
             "reader",
             {
                 "restricted": None,
-                "authenticated": ["reader", "editor"],
-                "public": ["reader", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
+                "public": ["reader", "commentator", "editor"],
+            },
+        ),
+        (
+            "restricted",
+            "commentator",
+            {
+                "restricted": None,
+                "authenticated": ["commentator", "editor"],
+                "public": ["commentator", "editor"],
             },
         ),
         (
@@ -1230,15 +1407,15 @@ def test_models_documents_restore_complex_bis(django_assert_num_queries):
             "public",
             None,
             {
-                "public": ["reader", "editor"],
+                "public": ["reader", "commentator", "editor"],
             },
         ),
         (
             None,
             "reader",
             {
-                "public": ["reader", "editor"],
-                "authenticated": ["reader", "editor"],
+                "public": ["reader", "commentator", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
                 "restricted": None,
             },
         ),
@@ -1246,8 +1423,8 @@ def test_models_documents_restore_complex_bis(django_assert_num_queries):
             None,
             None,
             {
-                "public": ["reader", "editor"],
-                "authenticated": ["reader", "editor"],
+                "public": ["reader", "commentator", "editor"],
+                "authenticated": ["reader", "commentator", "editor"],
                 "restricted": None,
             },
         ),

src/backend/core/urls.py

@@ -26,7 +26,11 @@ document_related_router.register(
     viewsets.InvitationViewset,
     basename="invitations",
 )
-
+document_related_router.register(
+    "comments",
+    viewsets.CommentViewSet,
+    basename="comments",
+)
 document_related_router.register(
     "ask-for-access",
     viewsets.DocumentAskForAccessViewSet,

src/backend/locale/br_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Breton\n"
 "Language: br_FR\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Me eo an aozer"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Sinedoù"
 
@@ -66,7 +70,7 @@ msgstr "Doare korf"
 msgid "Format"
 msgstr "Stumm"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "eilenn {title}"
@@ -225,8 +229,8 @@ msgstr "implijer"
 msgid "users"
 msgstr "implijerien"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "titl"
 
@@ -236,161 +240,161 @@ msgstr "bomm"
 
 #: build/lib/core/models.py:418 core/models.py:418
 msgid "Document"
-msgstr "Teul"
+msgstr "Restr"
 
 #: build/lib/core/models.py:419 core/models.py:419
 msgid "Documents"
-msgstr "Teulioù"
+msgstr "Restroù"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
-msgstr "Teuliad hep titl"
+msgstr "Restr hep titl"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
-msgstr "{name} en deus rannet un teul ganeoc'h!"
+msgstr "{name} en deus rannet ur restr ganeoc'h!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
-msgstr "{name} en deus pedet ac'hanoc'h gant ar rol \"{role}\" war an teul da-heul:"
+msgstr "{name} en deus pedet ac'hanoc'h gant ar rol \"{role}\" war ar restr da-heul:"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
-msgstr "{name} en deus rannet un teul ganeoc'h: {title}"
+msgstr "{name} en deus rannet ur restr ganeoc'h: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
-msgstr "Roud liamm an teuliad/an implijer"
+msgstr "Roud liamm ar restr/an implijer"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
-msgstr "Roudoù liamm an teuliad/an implijer"
+msgstr "Roudoù liamm ar restr/an implijer"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
-msgstr "Ur roud liamm a zo dija evit an teul/an implijer."
+msgstr "Ur roud liamm a zo dija evit an restr/an implijer."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
-msgstr "Teuliad muiañ-karet"
+msgstr "Restr muiañ-karet"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
-msgstr "Teuliadoù muiañ-karet"
+msgstr "Restroù muiañ-karet"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
-msgstr "An teul-mañ a zo un teul muiañ karet gant an implijer-mañ."
+msgstr "Ar restr-mañ a zo ur restr muiañ karet gant an implijer-mañ."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
-msgstr "Liamm teul/implijer"
+msgstr "Liamm restr/implijer"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
-msgstr "Liammoù teul/implijer"
+msgstr "Liammoù restr/implijer"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
-msgstr "An implijer-mañ a zo dija en teul-mañ."
+msgstr "An implijer-mañ a zo dija er restr-mañ."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
-msgstr "Ar skipailh-mañ a zo dija en teul-mañ."
+msgstr "Ar skipailh-mañ a zo dija en restr-mañ."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "An implijer pe ar skipailh a rank bezañ termenet, ket an daou avat."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
-msgstr "Goulenn tizhout an teul"
+msgstr "Goulenn tizhout ar restr"
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
-msgstr "Goulennoù tizhout an teul"
+msgstr "Goulennoù tizhout ar restr"
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
-msgstr "An implijer en deus goulennet tizhout an teul-mañ."
+msgstr "An implijer en deus goulennet tizhout ar restr-mañ."
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
-msgstr "{name} en defe c'hoant da dizhout an teul-mañ!"
+msgstr "{name} en defe c'hoant da dizhout ar restr-mañ!"
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
-msgstr "{name} en defe c'hoant da dizhout an teul da-heul:"
+msgstr "{name} en defe c'hoant da dizhout ar restr da-heul:"
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
-msgstr "{name} en defe c'hoant da dizhout an teul: {title}"
+msgstr "{name} en defe c'hoant da dizhout ar restr: {title}"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "deskrivadur"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "kod"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "publik"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "M'eo foran ar patrom-mañ hag implijus gant n'eus forzh piv."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Patrom"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Patromoù"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Liamm patrom/implijer"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Liammoù patrom/implijer"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "An implijer-mañ a zo dija er patrom-mañ."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Ar skipailh-mañ a zo dija er patrom-mañ."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "postel"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
-msgstr "Pedadenn d'un teul"
+msgstr "Pedadenn d'ur restr"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
-msgstr "Pedadennoù d'un teul"
+msgstr "Pedadennoù d'ur restr"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Ar postel-mañ a zo liammet ouzh un implijer enskrivet."
 
@@ -407,7 +411,7 @@ msgstr "Digeriñ"
 #: core/templates/mail/html/template.html:226
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
-msgstr " Docs, hoc'h ostilh nevez ret-holl evit aozañ, rannañ ha kenlabourat war an teulioù e skipailh. "
+msgstr " Docs, hoc'h ostilh nevez ret-holl evit aozañ, rannañ ha kenlabourat war ar restr e skipailh. "
 
 #: core/templates/mail/html/template.html:233
 #: core/templates/mail/text/template.txt:16

src/backend/locale/de_DE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: German\n"
 "Language: de_DE\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Ersteller bin ich"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favorit"
 
@@ -66,7 +70,7 @@ msgstr "Typ"
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "Kopie von {title}"
@@ -225,8 +229,8 @@ msgstr "Benutzer"
 msgid "users"
 msgstr "Benutzer"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "Titel"
 
@@ -242,155 +246,155 @@ msgstr "Dokument"
 msgid "Documents"
 msgstr "Dokumente"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Unbenanntes Dokument"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} hat Sie mit der Rolle \"{role}\" zu folgendem Dokument eingeladen:"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "Für dieses Dokument/ diesen Benutzer ist bereits eine Linkverfolgung vorhanden."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Dokumentenfavorit"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Dokumentfavoriten"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dieses Dokument ist bereits durch den gleichen Benutzer favorisiert worden."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "Dokument/Benutzerbeziehung"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "Dokument/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "Dieser Benutzer befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Dieses Team befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "Benutzer oder Team müssen gesetzt werden, nicht beides."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "Beschreibung"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "Code"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "öffentlich"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Ob diese Vorlage für jedermann öffentlich ist."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Vorlage"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Vorlagen"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Vorlage/Benutzer-Beziehung"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Vorlage/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "Dieser Benutzer ist bereits in dieser Vorlage."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Dieses Team ist bereits in diesem Template."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "E-Mail-Adresse"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Einladung zum Dokument"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Dokumenteinladungen"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Diese E-Mail ist bereits einem registrierten Benutzer zugeordnet."
 

src/backend/locale/en_US/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: English\n"
 "Language: en_US\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr ""
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr ""
 
@@ -66,7 +70,7 @@ msgstr ""
 msgid "Format"
 msgstr ""
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +229,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr ""
 
@@ -242,155 +246,155 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr ""
 

src/backend/locale/es_ES/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Spanish\n"
 "Language: es_ES\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Yo soy el creador"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favorito"
 
@@ -66,7 +70,7 @@ msgstr "Tipo de Cuerpo"
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copia de {title}"
@@ -225,8 +229,8 @@ msgstr "usuario"
 msgid "users"
 msgstr "usuarios"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "título"
 
@@ -242,155 +246,155 @@ msgstr "Documento"
 msgid "Documents"
 msgstr "Documentos"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Documento sin título"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "¡{name} ha compartido un documento contigo!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "Te ha invitado {name} al siguiente documento con el rol \"{role}\" :"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} ha compartido un documento contigo: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "Traza del enlace de documento/usuario"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "Trazas del enlace de documento/usuario"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "Ya existe una traza de enlace para este documento/usuario."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Documento favorito"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Documentos favoritos"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Este documento ya ha sido marcado como favorito por el usuario."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "Relación documento/usuario"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "Relaciones documento/usuario"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "Este usuario ya forma parte del documento."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Este equipo ya forma parte del documento."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "Debe establecerse un usuario o un equipo, no ambos."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr "Este usuario ya ha solicitado acceso a este documento."
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "¡{name} desea acceder a un documento!"
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "descripción"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "código"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "público"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Si esta plantilla es pública para que cualquiera la utilice."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Plantilla"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Plantillas"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Relación plantilla/usuario"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Relaciones plantilla/usuario"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "Este usuario ya forma parte de la plantilla."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Este equipo ya se encuentra en esta plantilla."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "dirección de correo electrónico"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Invitación al documento"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Invitaciones a documentos"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Este correo electrónico está asociado a un usuario registrado."
 

src/backend/locale/fr_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: French\n"
 "Language: fr_FR\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Je suis l'auteur"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favoris"
 
@@ -66,7 +70,7 @@ msgstr "Type de corps"
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copie de {title}"
@@ -225,8 +229,8 @@ msgstr "utilisateur"
 msgid "users"
 msgstr "utilisateurs"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "titre"
 
@@ -242,155 +246,155 @@ msgstr "Document"
 msgid "Documents"
 msgstr "Documents"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Document sans titre"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} a partagé un document avec vous!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vous a invité avec le rôle \"{role}\" sur le document suivant :"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} a partagé un document avec vous : {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "Trace du lien document/utilisateur"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "Traces du lien document/utilisateur"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "Une trace de lien existe déjà pour ce document/utilisateur."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Document favori"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Documents favoris"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Ce document est déjà un favori de cet utilisateur."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "Relation document/utilisateur"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "Relations document/utilisateur"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "Cet utilisateur est déjà dans ce document."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Cette équipe est déjà dans ce document."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "L'utilisateur ou l'équipe doivent être définis, pas les deux."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr "Demande d'accès au document"
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr "Demande d'accès au document"
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr "Cet utilisateur a déjà demandé l'accès à ce document."
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "{name} souhaiterait accéder au document suivant !"
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr "{name} souhaiterait accéder au document suivant :"
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr "{name} demande l'accès au document : {title}"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "description"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "public"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Si ce modèle est public, utilisable par n'importe qui."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Modèle"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Modèles"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Relation modèle/utilisateur"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Relations modèle/utilisateur"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "Cet utilisateur est déjà dans ce modèle."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Cette équipe est déjà modèle."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "adresse e-mail"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Invitation à un document"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Invitations à un document"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Cette adresse email est déjà associée à un utilisateur inscrit."
 

src/backend/locale/it_IT/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Italian\n"
 "Language: it_IT\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Il creatore sono io"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Preferiti"
 
@@ -66,7 +70,7 @@ msgstr ""
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copia di {title}"
@@ -225,8 +229,8 @@ msgstr "utente"
 msgid "users"
 msgstr "utenti"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "titolo"
 
@@ -242,155 +246,155 @@ msgstr "Documento"
 msgid "Documents"
 msgstr "Documenti"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Documento senza titolo"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} ha condiviso un documento con te!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} ti ha invitato con il ruolo \"{role}\" nel seguente documento:"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} ha condiviso un documento con te: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Documento preferito"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Documenti preferiti"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "Questo utente è già presente in questo documento."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Questo team è già presente in questo documento."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "descrizione"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "pubblico"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Indica se questo modello è pubblico per chiunque."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Modello"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Modelli"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "Questo utente è già in questo modello."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Questo team è già in questo modello."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "indirizzo e-mail"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Invito al documento"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Inviti al documento"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Questa email è già associata a un utente registrato."
 

src/backend/locale/nl_NL/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Dutch\n"
 "Language: nl_NL\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Ik ben Eigenaar"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favoriete"
 
@@ -66,7 +70,7 @@ msgstr "Text type"
 msgid "Format"
 msgstr "Formaat"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "kopie van {title}"
@@ -225,8 +229,8 @@ msgstr "gebruiker"
 msgid "users"
 msgstr "gebruikers"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "titel"
 
@@ -242,155 +246,155 @@ msgstr "Document"
 msgid "Documents"
 msgstr "Documenten"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Naamloos Document"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} heeft een document met gedeeld!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} heeft u uitgenodigd met de rol \"{role}\" op het volgende document:"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} heeft een document met u gedeeld: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "Document/gebruiker url"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "Document/gebruiker url"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "Een url bestaat al voor dit document/deze gebruiker."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Document favoriet"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Document favorieten"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dit document is al in gebruik als favoriete door dezelfde gebruiker."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "Document/gebruiker relatie"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "Document/gebruiker relaties"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "De gebruiker is al in dit document."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Het team is al in dit document."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "Een gebruiker of team moet gekozen worden, maar niet beide."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "omschrijving"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "publiek"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Of dit template als publiek is en door iedereen te gebruiken is."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Template"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Templates"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Template/gebruiker relatie"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Template/gebruiker relaties"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "De gebruiker bestaat al in dit template."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Het team bestaat al in dit template."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "email adres"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Document uitnodiging"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Document uitnodigingen"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Deze email is al geassocieerd met een geregistreerde gebruiker."
 

src/backend/locale/pt_PT/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Portuguese\n"
 "Language: pt_PT\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Eu sou o criador"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favorito"
 
@@ -66,7 +70,7 @@ msgstr "Tipo de corpo"
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "cópia de {title}"
@@ -225,8 +229,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr ""
 
@@ -242,155 +246,155 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr ""
 

src/backend/locale/sl_SI/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Slovenian\n"
 "Language: sl_SI\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Ustvaril sem jaz"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Priljubljena"
 
@@ -66,7 +70,7 @@ msgstr "Vrsta telesa"
 msgid "Format"
 msgstr "Oblika"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +229,8 @@ msgstr "uporabnik"
 msgid "users"
 msgstr "uporabniki"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "naslov"
 
@@ -242,155 +246,155 @@ msgstr "Dokument"
 msgid "Documents"
 msgstr "Dokumenti"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "Dokument brez naslova"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} je delil dokument z vami!"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vas je povabil z vlogo \"{role}\" na naslednjem dokumentu:"
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} je delil dokument z vami: {title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "Dokument/sled povezave uporabnika"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "Sledi povezav dokumenta/uporabnika"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "Za ta dokument/uporabnika že obstaja sled povezave."
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "Priljubljeni dokument"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "Priljubljeni dokumenti"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Ta dokument je že ciljno usmerjen s priljubljenim primerkom relacije za istega uporabnika."
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "Odnos dokument/uporabnik"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "Odnosi dokument/uporabnik"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "Ta uporabnik je že v tem dokumentu."
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "Ta ekipa je že v tem dokumentu."
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "Nastaviti je treba bodisi uporabnika ali ekipo, a ne obojega."
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "opis"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "koda"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "javno"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "Ali je ta predloga javna za uporabo."
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "Predloga"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "Predloge"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "Odnos predloga/uporabnik"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "Odnosi med predlogo in uporabnikom"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "Ta uporabnik je že v tej predlogi."
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "Ta ekipa je že v tej predlogi."
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "elektronski naslov"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Vabilo na dokument"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Vabila na dokument"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Ta e-poštni naslov je že povezan z registriranim uporabnikom."
 

src/backend/locale/sv_SE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Swedish\n"
 "Language: sv_SE\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "Skaparen är jag"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favoriter"
 
@@ -66,7 +70,7 @@ msgstr ""
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +229,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr ""
 
@@ -242,155 +246,155 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "e-postadress"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "Bjud in dokument"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "Inbjudningar dokument"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "Denna e-postadress är redan associerad med en registrerad användare."
 

src/backend/locale/tr_TR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Turkish\n"
 "Language: tr_TR\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr ""
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr ""
 
@@ -66,7 +70,7 @@ msgstr ""
 msgid "Format"
 msgstr ""
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +229,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr ""
 
@@ -242,155 +246,155 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr ""
 

src/backend/locale/zh_CN/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-07-08 15:21+0000\n"
-"PO-Revision-Date: 2025-07-18 10:25\n"
+"POT-Creation-Date: 2025-07-24 20:42+0000\n"
+"PO-Revision-Date: 2025-07-31 12:38\n"
 "Last-Translator: \n"
 "Language-Team: Chinese Simplified\n"
 "Language: zh_CN\n"
@@ -43,6 +43,10 @@ msgid "Creator is me"
 msgstr "创建者是我"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
+msgid "Masked"
+msgstr ""
+
+#: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "收藏"
 
@@ -66,7 +70,7 @@ msgstr "正文类型"
 msgid "Format"
 msgstr "格式"
 
-#: build/lib/core/api/viewsets.py:943 core/api/viewsets.py:943
+#: build/lib/core/api/viewsets.py:942 core/api/viewsets.py:942
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "{title} 的副本"
@@ -225,8 +229,8 @@ msgstr "用户"
 msgid "users"
 msgstr "个用户"
 
-#: build/lib/core/models.py:368 build/lib/core/models.py:1281
-#: core/models.py:368 core/models.py:1281
+#: build/lib/core/models.py:368 build/lib/core/models.py:1283
+#: core/models.py:368 core/models.py:1283
 msgid "title"
 msgstr "标题"
 
@@ -242,155 +246,155 @@ msgstr "文档"
 msgid "Documents"
 msgstr "个文档"
 
-#: build/lib/core/models.py:431 build/lib/core/models.py:820 core/models.py:431
-#: core/models.py:820
+#: build/lib/core/models.py:431 build/lib/core/models.py:821 core/models.py:431
+#: core/models.py:821
 msgid "Untitled Document"
 msgstr "未命名文档"
 
-#: build/lib/core/models.py:855 core/models.py:855
+#: build/lib/core/models.py:856 core/models.py:856
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} 与您共享了一个文档！"
 
-#: build/lib/core/models.py:859 core/models.py:859
+#: build/lib/core/models.py:860 core/models.py:860
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} 邀请您以“{role}”角色访问以下文档："
 
-#: build/lib/core/models.py:865 core/models.py:865
+#: build/lib/core/models.py:866 core/models.py:866
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} 与您共享了一个文档：{title}"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link trace"
 msgstr "文档/用户链接跟踪"
 
-#: build/lib/core/models.py:965 core/models.py:965
+#: build/lib/core/models.py:967 core/models.py:967
 msgid "Document/user link traces"
 msgstr "个文档/用户链接跟踪"
 
-#: build/lib/core/models.py:971 core/models.py:971
+#: build/lib/core/models.py:973 core/models.py:973
 msgid "A link trace already exists for this document/user."
 msgstr "此文档/用户的链接跟踪已存在。"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorite"
 msgstr "文档收藏"
 
-#: build/lib/core/models.py:995 core/models.py:995
+#: build/lib/core/models.py:997 core/models.py:997
 msgid "Document favorites"
 msgstr "文档收藏夹"
 
-#: build/lib/core/models.py:1001 core/models.py:1001
+#: build/lib/core/models.py:1003 core/models.py:1003
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "该文档已被同一用户的收藏关系实例关联。"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relation"
 msgstr "文档/用户关系"
 
-#: build/lib/core/models.py:1024 core/models.py:1024
+#: build/lib/core/models.py:1026 core/models.py:1026
 msgid "Document/user relations"
 msgstr "文档/用户关系集"
 
-#: build/lib/core/models.py:1030 core/models.py:1030
+#: build/lib/core/models.py:1032 core/models.py:1032
 msgid "This user is already in this document."
 msgstr "该用户已在此文档中。"
 
-#: build/lib/core/models.py:1036 core/models.py:1036
+#: build/lib/core/models.py:1038 core/models.py:1038
 msgid "This team is already in this document."
 msgstr "该团队已在此文档中。"
 
-#: build/lib/core/models.py:1042 build/lib/core/models.py:1367
-#: core/models.py:1042 core/models.py:1367
+#: build/lib/core/models.py:1044 build/lib/core/models.py:1369
+#: core/models.py:1044 core/models.py:1369
 msgid "Either user or team must be set, not both."
 msgstr "必须设置用户或团队之一，不能同时设置两者。"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1189 core/models.py:1189
+#: build/lib/core/models.py:1191 core/models.py:1191
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1195 core/models.py:1195
+#: build/lib/core/models.py:1197 core/models.py:1197
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1260 core/models.py:1260
+#: build/lib/core/models.py:1262 core/models.py:1262
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1264 core/models.py:1264
+#: build/lib/core/models.py:1266 core/models.py:1266
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1270 core/models.py:1270
+#: build/lib/core/models.py:1272 core/models.py:1272
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "description"
 msgstr "说明"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "code"
 msgstr "代码"
 
-#: build/lib/core/models.py:1284 core/models.py:1284
+#: build/lib/core/models.py:1286 core/models.py:1286
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1286 core/models.py:1286
+#: build/lib/core/models.py:1288 core/models.py:1288
 msgid "public"
 msgstr "公开"
 
-#: build/lib/core/models.py:1288 core/models.py:1288
+#: build/lib/core/models.py:1290 core/models.py:1290
 msgid "Whether this template is public for anyone to use."
 msgstr "该模板是否公开供任何人使用。"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Template"
 msgstr "模板"
 
-#: build/lib/core/models.py:1295 core/models.py:1295
+#: build/lib/core/models.py:1297 core/models.py:1297
 msgid "Templates"
 msgstr "模板"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relation"
 msgstr "模板/用户关系"
 
-#: build/lib/core/models.py:1349 core/models.py:1349
+#: build/lib/core/models.py:1351 core/models.py:1351
 msgid "Template/user relations"
 msgstr "模板/用户关系集"
 
-#: build/lib/core/models.py:1355 core/models.py:1355
+#: build/lib/core/models.py:1357 core/models.py:1357
 msgid "This user is already in this template."
 msgstr "该用户已在此模板中。"
 
-#: build/lib/core/models.py:1361 core/models.py:1361
+#: build/lib/core/models.py:1363 core/models.py:1363
 msgid "This team is already in this template."
 msgstr "该团队已在此模板中。"
 
-#: build/lib/core/models.py:1438 core/models.py:1438
+#: build/lib/core/models.py:1440 core/models.py:1440
 msgid "email address"
 msgstr "电子邮件地址"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitation"
 msgstr "文档邀请"
 
-#: build/lib/core/models.py:1458 core/models.py:1458
+#: build/lib/core/models.py:1460 core/models.py:1460
 msgid "Document invitations"
 msgstr "文档邀请"
 
-#: build/lib/core/models.py:1478 core/models.py:1478
+#: build/lib/core/models.py:1480 core/models.py:1480
 msgid "This email is already associated to a registered user."
 msgstr "此电子邮件已经与现有注册用户关联。"
 

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "impress"
-version = "3.4.2"
+version = "3.5.0"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -64,10 +64,10 @@ dependencies = [
 ]
 
 [project.urls]
-"Bug Tracker" = "https://github.com/numerique-gouv/impress/issues/new"
-"Changelog" = "https://github.com/numerique-gouv/impress/blob/main/CHANGELOG.md"
-"Homepage" = "https://github.com/numerique-gouv/impress"
-"Repository" = "https://github.com/numerique-gouv/impress"
+"Bug Tracker" = "https://github.com/suitenumerique/docs/issues/new"
+"Changelog" = "https://github.com/suitenumerique/docs/blob/main/CHANGELOG.md"
+"Homepage" = "https://github.com/suitenumerique/docs"
+"Repository" = "https://github.com/suitenumerique/docs"
 
 [project.optional-dependencies]
 dev = [

src/frontend/apps/e2e/__tests__/app-impress/404.spec.ts

@@ -3,7 +3,7 @@ import { expect, test } from '@playwright/test';
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
   await expect(
-    page.locator('header').first().locator('h2').getByText('Docs'),
+    page.locator('header').first().locator('h1').getByText('Docs'),
   ).toBeVisible();
   await page.goto('unknown-page404');
 });

src/frontend/apps/e2e/__tests__/app-impress/auth.setup.ts

@@ -1,6 +1,6 @@
 import { FullConfig, FullProject, chromium, expect } from '@playwright/test';
 
-import { keyCloakSignIn } from './common';
+import { keyCloakSignIn } from './utils-common';
 
 const saveStorageState = async (
   browserConfig: FullProject<unknown, unknown>,
@@ -23,7 +23,7 @@ const saveStorageState = async (
       page.locator('header').first().getByRole('button', {
         name: 'Logout',
       }),
-    ).toBeVisible();
+    ).toBeVisible({ timeout: 10000 });
 
     await page.context().storageState({
       path: storageState as string,

src/frontend/apps/e2e/__tests__/app-impress/config.spec.ts

@@ -2,7 +2,7 @@ import path from 'path';
 
 import { expect, test } from '@playwright/test';
 
-import { CONFIG, createDoc, overrideConfig } from './common';
+import { CONFIG, createDoc, overrideConfig } from './utils-common';
 
 test.describe('Config', () => {
   test('it checks that sentry is trying to init from config endpoint', async ({
@@ -43,7 +43,9 @@ test.describe('Config', () => {
       path.join(__dirname, 'assets/logo-suite-numerique.png'),
     );
 
-    const image = page.getByRole('img', { name: 'logo-suite-numerique.png' });
+    const image = page
+      .locator('.--docs--editor-container img.bn-visual-media')
+      .first();
 
     await expect(image).toBeVisible();
 

src/frontend/apps/e2e/__tests__/app-impress/doc-create.spec.ts

@@ -6,7 +6,7 @@ import {
   keyCloakSignIn,
   randomName,
   verifyDocName,
-} from './common';
+} from './utils-common';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -22,13 +22,57 @@ test.describe('Doc Create', () => {
     );
 
     const header = page.locator('header').first();
-    await header.locator('h2').getByText('Docs').click();
+    await header.locator('h1').getByText('Docs').click();
 
     const docsGrid = page.getByTestId('docs-grid');
     await expect(docsGrid).toBeVisible();
     await expect(page.getByTestId('grid-loader')).toBeHidden();
     await expect(docsGrid.getByText(docTitle)).toBeVisible();
   });
+
+  test('it creates a sub doc from slash menu editor', async ({
+    page,
+    browserName,
+  }) => {
+    const [title] = await createDoc(page, 'my-new-slash-doc', browserName, 1);
+
+    await verifyDocName(page, title);
+
+    await page.locator('.bn-block-outer').last().fill('/');
+    await page
+      .getByText('New sub-doc', {
+        exact: true,
+      })
+      .click();
+
+    const input = page.getByRole('textbox', { name: 'doc title input' });
+    await expect(input).toHaveText('');
+    await expect(
+      page.locator('.c__tree-view--row-content').getByText('Untitled document'),
+    ).toBeVisible();
+  });
+
+  test('it creates a sub doc from interlinking dropdown', async ({
+    page,
+    browserName,
+  }) => {
+    const [title] = await createDoc(page, 'my-new-slash-doc', browserName, 1);
+
+    await verifyDocName(page, title);
+
+    await page.locator('.bn-block-outer').last().fill('/');
+    await page.getByText('Link a doc').first().click();
+    await page
+      .locator('.quick-search-container')
+      .getByText('New sub-doc')
+      .click();
+
+    const input = page.getByRole('textbox', { name: 'doc title input' });
+    await expect(input).toHaveText('');
+    await expect(
+      page.locator('.c__tree-view--row-content').getByText('Untitled document'),
+    ).toBeVisible();
+  });
 });
 
 test.describe('Doc Create: Not logged', () => {

src/frontend/apps/e2e/__tests__/app-impress/doc-editor.spec.ts

@@ -9,8 +9,8 @@ import {
   mockedDocument,
   overrideConfig,
   verifyDocName,
-} from './common';
-import { createRootSubPage } from './sub-pages-utils';
+} from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -93,7 +93,7 @@ test.describe('Doc Editor', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
 
     // When the visibility is changed, the ws should close the connection (backend signal)
     const wsClosePromise = webSocket.waitForEvent('close');
@@ -272,7 +272,9 @@ test.describe('Doc Editor', () => {
       path.join(__dirname, 'assets/logo-suite-numerique.png'),
     );
 
-    const image = page.getByRole('img', { name: 'logo-suite-numerique.png' });
+    const image = page
+      .locator('.--docs--editor-container img.bn-visual-media')
+      .first();
 
     await expect(image).toBeVisible();
 
@@ -284,6 +286,11 @@ test.describe('Doc Editor', () => {
     expect(await image.getAttribute('src')).toMatch(
       /http:\/\/localhost:8083\/media\/.*\/attachments\/.*.png/,
     );
+
+    await expect(image).toHaveAttribute('role', 'presentation');
+    await expect(image).toHaveAttribute('alt', '');
+    await expect(image).toHaveAttribute('tabindex', '-1');
+    await expect(image).toHaveAttribute('aria-hidden', 'true');
   });
 
   test('it checks the AI buttons', async ({ page, browserName }) => {
@@ -561,7 +568,7 @@ test.describe('Doc Editor', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    await page.getByLabel('Visibility', { exact: true }).click();
+    await page.getByTestId('doc-visibility').click();
 
     await page
       .getByRole('menuitem', {
@@ -573,7 +580,7 @@ test.describe('Doc Editor', () => {
       page.getByText('The document visibility has been updated.'),
     ).toBeVisible();
 
-    await page.getByLabel('Visibility mode').click();
+    await page.getByTestId('doc-access-mode').click();
     await page.getByRole('menuitem', { name: 'Editing' }).click();
 
     // Close the modal
@@ -655,7 +662,7 @@ test.describe('Doc Editor', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    await page.getByLabel('Visibility mode').click();
+    await page.getByTestId('doc-access-mode').click();
     await page.getByRole('menuitem', { name: 'Reading' }).click();
 
     // Close the modal
@@ -706,4 +713,75 @@ test.describe('Doc Editor', () => {
       'pink',
     );
   });
+
+  test('it checks interlink feature', async ({ page, browserName }) => {
+    const [randomDoc] = await createDoc(page, 'doc-interlink', browserName, 1);
+
+    await verifyDocName(page, randomDoc);
+
+    const { name: docChild1 } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-interlink-child-1',
+    );
+
+    await verifyDocName(page, docChild1);
+
+    const { name: docChild2 } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-interlink-child-2',
+    );
+
+    await verifyDocName(page, docChild2);
+
+    await page.locator('.bn-block-outer').last().fill('/');
+    await page.getByText('Link a doc').first().click();
+
+    const input = page.locator(
+      "span[data-inline-content-type='interlinkingSearchInline'] input",
+    );
+    const searchContainer = page.locator('.quick-search-container');
+
+    await input.fill('doc-interlink');
+
+    await expect(searchContainer.getByText(randomDoc)).toBeVisible();
+    await expect(searchContainer.getByText(docChild1)).toBeVisible();
+    await expect(searchContainer.getByText(docChild2)).toBeVisible();
+
+    await input.pressSequentially('-child');
+
+    await expect(searchContainer.getByText(docChild1)).toBeVisible();
+    await expect(searchContainer.getByText(docChild2)).toBeVisible();
+    await expect(searchContainer.getByText(randomDoc)).toBeHidden();
+
+    // use keydown to select the second result
+    await page.keyboard.press('ArrowDown');
+    await page.keyboard.press('Enter');
+
+    const interlink = page.getByRole('link', {
+      name: 'child-2',
+    });
+
+    await expect(interlink).toBeVisible();
+    await interlink.click();
+
+    await verifyDocName(page, docChild2);
+  });
+
+  test('it checks interlink shortcut @', async ({ page, browserName }) => {
+    const [randomDoc] = await createDoc(page, 'doc-interlink', browserName, 1);
+
+    await verifyDocName(page, randomDoc);
+
+    const editor = page.locator('.bn-block-outer').last();
+    await editor.click();
+    await page.keyboard.press('@');
+
+    await expect(
+      page.locator(
+        "span[data-inline-content-type='interlinkingSearchInline'] input",
+      ),
+    ).toBeVisible();
+  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-export.spec.ts

@@ -4,7 +4,14 @@ import { expect, test } from '@playwright/test';
 import cs from 'convert-stream';
 import pdf from 'pdf-parse';
 
-import { createDoc, verifyDocName } from './common';
+import {
+  TestLanguage,
+  createDoc,
+  randomName,
+  verifyDocName,
+  waitForLanguageSwitch,
+} from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -115,7 +122,9 @@ test.describe('Doc Export', () => {
     const fileChooser = await fileChooserPromise;
     await fileChooser.setFiles(path.join(__dirname, 'assets/test.svg'));
 
-    const image = page.getByRole('img', { name: 'test.svg' });
+    const image = page
+      .locator('.--docs--editor-container img.bn-visual-media')
+      .first();
 
     await expect(image).toBeVisible();
 
@@ -175,7 +184,9 @@ test.describe('Doc Export', () => {
     const fileChooser = await fileChooserPromise;
     await fileChooser.setFiles(path.join(__dirname, 'assets/test.svg'));
 
-    const image = page.getByRole('img', { name: 'test.svg' });
+    const image = page
+      .locator('.--docs--editor-container img.bn-visual-media')
+      .first();
 
     await expect(image).toBeVisible();
 
@@ -346,4 +357,204 @@ test.describe('Doc Export', () => {
     const pdfData = await pdf(pdfBuffer);
     expect(pdfData.text).toContain('Hello World');
   });
+
+  test('it exports the doc with multi columns', async ({
+    page,
+    browserName,
+  }) => {
+    const [randomDoc] = await createDoc(
+      page,
+      'doc-multi-columns',
+      browserName,
+      1,
+    );
+
+    await page.locator('.bn-block-outer').last().fill('/');
+
+    await page.getByText('Three Columns', { exact: true }).click();
+
+    await page.locator('.bn-block-column').first().fill('Column 1');
+    await page.locator('.bn-block-column').nth(1).fill('Column 2');
+    await page.locator('.bn-block-column').last().fill('Column 3');
+
+    expect(await page.locator('.bn-block-column').count()).toBe(3);
+    await expect(
+      page.locator('.bn-block-column[data-node-type="column"]').first(),
+    ).toHaveText('Column 1');
+    await expect(
+      page.locator('.bn-block-column[data-node-type="column"]').nth(1),
+    ).toHaveText('Column 2');
+    await expect(
+      page.locator('.bn-block-column[data-node-type="column"]').last(),
+    ).toHaveText('Column 3');
+
+    await page
+      .getByRole('button', {
+        name: 'download',
+        exact: true,
+      })
+      .click();
+
+    await expect(
+      page.getByRole('button', {
+        name: 'Download',
+        exact: true,
+      }),
+    ).toBeVisible();
+
+    const downloadPromise = page.waitForEvent('download', (download) => {
+      return download.suggestedFilename().includes(`${randomDoc}.pdf`);
+    });
+
+    void page
+      .getByRole('button', {
+        name: 'Download',
+        exact: true,
+      })
+      .click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
+
+    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
+    const pdfData = await pdf(pdfBuffer);
+    expect(pdfData.text).toContain('Column 1');
+    expect(pdfData.text).toContain('Column 2');
+    expect(pdfData.text).toContain('Column 3');
+  });
+
+  test('it injects the correct language attribute into PDF export', async ({
+    page,
+    browserName,
+  }) => {
+    await waitForLanguageSwitch(page, TestLanguage.French);
+
+    // Wait for the page to be ready after language switch
+    await page.waitForLoadState('domcontentloaded');
+
+    const header = page.locator('header').first();
+    await header.locator('h1').getByText('Docs').click();
+
+    const randomDocFrench = randomName(
+      'doc-language-export-french',
+      browserName,
+      1,
+    )[0];
+
+    await page
+      .getByRole('button', {
+        name: 'Nouveau doc',
+      })
+      .click();
+
+    await page.waitForURL('**/docs/**', {
+      timeout: 10000,
+      waitUntil: 'domcontentloaded',
+    });
+
+    const input = page.getByLabel('doc title input');
+    await expect(input).toBeVisible();
+    await expect(input).toHaveText('');
+    await input.click();
+    await input.fill(randomDocFrench);
+    await input.blur();
+
+    const editor = page.locator('.ProseMirror.bn-editor');
+    await editor.click();
+    await editor.fill('Contenu de test pour export en français');
+
+    await page
+      .getByRole('button', {
+        name: 'download',
+        exact: true,
+      })
+      .click();
+
+    const downloadPromise = page.waitForEvent('download', (download) => {
+      return download.suggestedFilename().includes(`${randomDocFrench}.pdf`);
+    });
+
+    void page
+      .getByRole('button', {
+        name: 'Télécharger',
+        exact: true,
+      })
+      .click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toBe(`${randomDocFrench}.pdf`);
+
+    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
+    const pdfString = pdfBuffer.toString('latin1');
+
+    expect(pdfString).toContain('/Lang (fr)');
+  });
+
+  test('it exports the doc with interlinking', async ({
+    page,
+    browserName,
+  }) => {
+    const [randomDoc] = await createDoc(
+      page,
+      'export-interlinking',
+      browserName,
+      1,
+    );
+
+    await verifyDocName(page, randomDoc);
+
+    const { name: docChild } = await createRootSubPage(
+      page,
+      browserName,
+      'export-interlink-child',
+    );
+
+    await verifyDocName(page, docChild);
+
+    await page.locator('.bn-block-outer').last().fill('/');
+    await page.getByText('Link a doc').first().click();
+
+    await page
+      .locator(
+        "span[data-inline-content-type='interlinkingSearchInline'] input",
+      )
+      .fill('interlink-child');
+
+    await page
+      .locator('.quick-search-container')
+      .getByText('interlink-child')
+      .click();
+
+    const interlink = page.getByRole('link', {
+      name: 'interlink-child',
+    });
+
+    await expect(interlink).toBeVisible();
+
+    const downloadPromise = page.waitForEvent('download', (download) => {
+      return download.suggestedFilename().includes(`${docChild}.pdf`);
+    });
+
+    await page
+      .getByRole('button', {
+        name: 'download',
+        exact: true,
+      })
+      .click();
+
+    void page
+      .getByRole('button', {
+        name: 'Download',
+        exact: true,
+      })
+      .click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toBe(`${docChild}.pdf`);
+
+    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
+    const pdfData = await pdf(pdfBuffer);
+
+    expect(pdfData.text).toContain('interlink-child'); // This is the pdf text
+  });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-grid-dnd.spec.ts

@@ -1,15 +1,16 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, mockedListDocs } from './common';
+import { createDoc, mockedListDocs } from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc grid dnd', () => {
   test('it creates a doc', async ({ page, browserName }) => {
     await page.goto('/');
     const header = page.locator('header').first();
     await createDoc(page, 'Draggable doc', browserName, 1);
-    await header.locator('h2').getByText('Docs').click();
+    await header.locator('h1').getByText('Docs').click();
     await createDoc(page, 'Droppable doc', browserName, 1);
-    await header.locator('h2').getByText('Docs').click();
+    await header.locator('h1').getByText('Docs').click();
 
     const response = await page.waitForResponse(
       (response) =>
@@ -165,6 +166,40 @@ test.describe('Doc grid dnd', () => {
   });
 });
 
+test.describe('Doc grid dnd mobile', () => {
+  test.use({ viewport: { width: 500, height: 1200 } });
+
+  test('DND is deactivated on mobile', async ({ page, browserName }) => {
+    await page.goto('/');
+
+    const docsGrid = page.getByTestId('docs-grid');
+    await expect(page.getByTestId('docs-grid')).toBeVisible();
+    await expect(page.getByTestId('grid-loader')).toBeHidden();
+
+    await expect(docsGrid.getByRole('row').first()).toBeVisible();
+    await expect(docsGrid.locator('.--docs--grid-droppable')).toHaveCount(0);
+
+    await createDoc(page, 'Draggable doc mobile', browserName, 1, true);
+
+    await createRootSubPage(
+      page,
+      browserName,
+      'Draggable doc mobile child',
+      true,
+    );
+
+    await page
+      .getByRole('button', { name: 'Open the header menu' })
+      .getByText('menu')
+      .click();
+
+    await expect(page.locator('.--docs-sub-page-item').first()).toHaveAttribute(
+      'draggable',
+      'false',
+    );
+  });
+});
+
 const data = [
   {
     id: 'can-drop-and-drag',

src/frontend/apps/e2e/__tests__/app-impress/doc-grid.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, getGridRow } from './common';
+import { createDoc, getGridRow } from './utils-common';
 
 type SmallDoc = {
   id: string;
@@ -119,7 +119,7 @@ test.describe('Document grid item options', () => {
     await page.getByText('push_pin').click();
 
     // Check is pinned
-    await expect(row.getByLabel('Pin document icon')).toBeVisible();
+    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeVisible();
     const leftPanelFavorites = page.getByTestId('left-panel-favorites');
     await expect(leftPanelFavorites.getByText(docTitle)).toBeVisible();
 
@@ -128,7 +128,7 @@ test.describe('Document grid item options', () => {
     await page.getByText('Unpin').click();
 
     // Check is unpinned
-    await expect(row.getByLabel('Pin document icon')).toBeHidden();
+    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeHidden();
     await expect(leftPanelFavorites.getByText(docTitle)).toBeHidden();
   });
 
@@ -227,18 +227,18 @@ test.describe('Documents filters', () => {
 
     // Initial state
     await expect(allDocs).toBeVisible();
-    await expect(allDocs).toHaveAttribute('aria-selected', 'true');
+    await expect(allDocs).toHaveAttribute('aria-current', 'page');
 
     await expect(myDocs).toBeVisible();
     await expect(myDocs).toHaveCSS('background-color', 'rgba(0, 0, 0, 0)');
-    await expect(myDocs).toHaveAttribute('aria-selected', 'false');
+    await expect(myDocs).not.toHaveAttribute('aria-current');
 
     await expect(sharedWithMe).toBeVisible();
     await expect(sharedWithMe).toHaveCSS(
       'background-color',
       'rgba(0, 0, 0, 0)',
     );
-    await expect(sharedWithMe).toHaveAttribute('aria-selected', 'false');
+    await expect(sharedWithMe).not.toHaveAttribute('aria-current');
 
     await allDocs.click();
 

src/frontend/apps/e2e/__tests__/app-impress/doc-header.spec.ts

@@ -4,12 +4,11 @@ import {
   createDoc,
   getGridRow,
   goToGridDoc,
-  mockedAccesses,
   mockedDocument,
-  mockedInvitations,
   verifyDocName,
-} from './common';
-import { createRootSubPage } from './sub-pages-utils';
+} from './utils-common';
+import { mockedAccesses, mockedInvitations } from './utils-share';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -31,7 +30,7 @@ test.describe('Doc Header', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    await page.getByLabel('Visibility', { exact: true }).click();
+    await page.getByTestId('doc-visibility').click();
 
     await page
       .getByRole('menuitem', {
@@ -410,7 +409,7 @@ test.describe('Doc Header', () => {
     const row = await getGridRow(page, docTitle);
 
     // Check is pinned
-    await expect(row.getByLabel('Pin document icon')).toBeVisible();
+    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeVisible();
     const leftPanelFavorites = page.getByTestId('left-panel-favorites');
     await expect(leftPanelFavorites.getByText(docTitle)).toBeVisible();
 
@@ -425,7 +424,7 @@ test.describe('Doc Header', () => {
     await page.goto('/');
 
     // Check is unpinned
-    await expect(row.getByLabel('Pin document icon')).toBeHidden();
+    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeHidden();
     await expect(leftPanelFavorites.getByText(docTitle)).toBeHidden();
   });
 
@@ -443,9 +442,10 @@ test.describe('Doc Header', () => {
       page.getByText('Document duplicated successfully!'),
     ).toBeVisible();
 
-    await page.goto('/');
-
     const duplicateTitle = 'Copy of ' + docTitle;
+    await verifyDocName(page, duplicateTitle);
+
+    await page.goto('/');
 
     const row = await getGridRow(page, duplicateTitle);
 
@@ -471,16 +471,24 @@ test.describe('Doc Header', () => {
     await editor.click();
     await editor.fill('Hello Duplicated World');
 
-    await page.getByLabel('Open the document options').click();
+    const duplicateTitle = 'Copy of ' + childTitle;
+    const docTree = page.getByTestId('doc-tree');
+
+    const child = docTree
+      .getByRole('treeitem')
+      .locator('.--docs-sub-page-item')
+      .filter({
+        hasText: childTitle,
+      });
+    await child.hover();
+    await child.getByText(`more_horiz`).click();
 
     await page.getByRole('menuitem', { name: 'Duplicate' }).click();
-    await expect(
-      page.getByText('Document duplicated successfully!'),
-    ).toBeVisible();
 
-    const duplicateDuplicateTitle = 'Copy of ' + childTitle;
+    await verifyDocName(page, duplicateTitle);
+
     await expect(
-      page.getByTestId('doc-tree').getByText(duplicateDuplicateTitle),
+      page.getByTestId('doc-tree').getByText(duplicateTitle),
     ).toBeVisible();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-inherited-share.spec.ts

@@ -1,8 +1,8 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, verifyDocName } from './common';
-import { updateShareLink } from './share-utils';
-import { createRootSubPage } from './sub-pages-utils';
+import { createDoc, verifyDocName } from './utils-common';
+import { updateShareLink } from './utils-share';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Inherited share accesses', () => {
   test('it checks inherited accesses', async ({ page, browserName }) => {
@@ -31,9 +31,7 @@ test.describe('Inherited share accesses', () => {
 
     await verifyDocName(page, parentTitle);
   });
-});
 
-test.describe('Inherited share link', () => {
   test('it checks if the link is inherited', async ({ page, browserName }) => {
     await page.goto('/');
     // Create root doc
@@ -47,12 +45,50 @@ test.describe('Inherited share link', () => {
     // Create sub page
     await createRootSubPage(page, browserName, 'sub-page');
 
-    // // verify share link is restricted and reader
+    // Verify share link is like the parent document
     await page.getByRole('button', { name: 'Share' }).click();
-    // await expect(page.getByText('Inherited share')).toBeVisible();
     const docVisibilityCard = page.getByLabel('Doc visibility card');
-    await expect(docVisibilityCard).toBeVisible();
+
     await expect(docVisibilityCard.getByText('Connected')).toBeVisible();
     await expect(docVisibilityCard.getByText('Reading')).toBeVisible();
+
+    // Verify inherited link
+    await docVisibilityCard.getByText('Connected').click();
+    await expect(
+      page.getByRole('menuitem', { name: 'Private' }),
+    ).toBeDisabled();
+
+    // Update child link
+    await page.getByRole('menuitem', { name: 'Public' }).click();
+
+    await docVisibilityCard.getByText('Reading').click();
+    await page.getByRole('menuitem', { name: 'Editing' }).click();
+
+    await expect(docVisibilityCard.getByText('Connected')).toBeHidden();
+    await expect(docVisibilityCard.getByText('Reading')).toBeHidden();
+    await expect(
+      docVisibilityCard.getByText('Public', {
+        exact: true,
+      }),
+    ).toBeVisible();
+    await expect(docVisibilityCard.getByText('Editing')).toBeVisible();
+    await expect(
+      docVisibilityCard.getByText(
+        'The link sharing rules differ from the parent document',
+      ),
+    ).toBeVisible();
+
+    // Restore inherited link
+    await page.getByRole('button', { name: 'Restore' }).click();
+
+    await expect(docVisibilityCard.getByText('Connected')).toBeVisible();
+    await expect(docVisibilityCard.getByText('Reading')).toBeVisible();
+    await expect(docVisibilityCard.getByText('Public')).toBeHidden();
+    await expect(docVisibilityCard.getByText('Editing')).toBeHidden();
+    await expect(
+      docVisibilityCard.getByText(
+        'The link sharing rules differ from the parent document',
+      ),
+    ).toBeHidden();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-member-create.spec.ts

@@ -6,8 +6,8 @@ import {
   keyCloakSignIn,
   randomName,
   verifyDocName,
-} from './common';
-import { createRootSubPage } from './sub-pages-utils';
+} from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Document create member', () => {
   test.beforeEach(async ({ page }) => {
@@ -244,9 +244,7 @@ test.describe('Document create member: Multiple login', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible();
+    await expect(page.getByTestId('header-logo-link')).toBeVisible();
 
     await page.goto(urlDoc);
 
@@ -271,9 +269,7 @@ test.describe('Document create member: Multiple login', () => {
     await page.goto('/');
     await keyCloakSignIn(page, browserName);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible({
+    await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
     });
 
@@ -334,9 +330,7 @@ test.describe('Document create member: Multiple login', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible({
+    await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
     });
 

src/frontend/apps/e2e/__tests__/app-impress/doc-member-list.spec.ts

@@ -1,6 +1,7 @@
 import { expect, test } from '@playwright/test';
 
-import { addNewMember, createDoc, goToGridDoc, verifyDocName } from './common';
+import { createDoc, goToGridDoc, verifyDocName } from './utils-common';
+import { addNewMember } from './utils-share';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -148,7 +149,11 @@ test.describe('Document list members', () => {
       `You are the sole owner of this group, make another member the group owner before you can change your own role or be removed from your document.`,
     );
     await expect(soloOwner).toBeVisible();
-    await list.click();
+
+    await list.click({
+      // eslint-disable-next-line playwright/no-force-option
+      force: true, // Force click to close the dropdown
+    });
     const newUserEmail = await addNewMember(page, 0, 'Owner');
     const newUser = list.getByTestId(`doc-share-member-row-${newUserEmail}`);
     const newUserRoles = newUser.getByLabel('doc-role-dropdown');
@@ -157,10 +162,16 @@ test.describe('Document list members', () => {
 
     await currentUserRole.click();
     await expect(soloOwner).toBeHidden();
-    await list.click();
+    await list.click({
+      // eslint-disable-next-line playwright/no-force-option
+      force: true, // Force click to close the dropdown
+    });
 
     await newUserRoles.click();
-    await list.click();
+    await list.click({
+      // eslint-disable-next-line playwright/no-force-option
+      force: true, // Force click to close the dropdown
+    });
 
     await currentUserRole.click();
     await page.getByLabel('Administrator').click();

src/frontend/apps/e2e/__tests__/app-impress/doc-routing.spec.ts

@@ -8,25 +8,19 @@ import {
   keyCloakSignIn,
   mockedDocument,
   verifyDocName,
-} from './common';
+} from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc Routing', () => {
   test.beforeEach(async ({ page }) => {
     await page.goto('/');
   });
 
-  test('Check the presence of the meta tag noindex', async ({ page }) => {
-    const buttonCreateHomepage = page.getByRole('button', {
-      name: 'New doc',
-    });
-
-    await expect(buttonCreateHomepage).toBeVisible();
-    await buttonCreateHomepage.click();
-    await expect(
-      page.getByRole('button', {
-        name: 'Share',
-      }),
-    ).toBeVisible();
+  test('Check the presence of the meta tag noindex', async ({
+    page,
+    browserName,
+  }) => {
+    await createDoc(page, 'doc-routing-test', browserName, 1);
     const metaDescription = page.locator('meta[name="robots"]');
     await expect(metaDescription).toHaveAttribute('content', 'noindex');
   });
@@ -60,16 +54,20 @@ test.describe('Doc Routing', () => {
   });
 
   test('checks 401 on docs/[id] page', async ({ page, browserName }) => {
-    const [docTitle] = await createDoc(page, '401-doc', browserName, 1);
+    const [docTitle] = await createDoc(page, '401-doc-parent', browserName, 1);
     await verifyDocName(page, docTitle);
 
+    await createRootSubPage(page, browserName, '401-doc-child');
+
+    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+
     const responsePromise = page.route(
-      /.*\/link-configuration\/$|users\/me\/$/,
+      /.*\/documents\/.*\/$|users\/me\/$/,
       async (route) => {
         const request = route.request();
 
         if (
-          request.method().includes('PUT') ||
+          request.method().includes('PATCH') ||
           request.method().includes('GET')
         ) {
           await route.fulfill({
@@ -84,11 +82,7 @@ test.describe('Doc Routing', () => {
       },
     );
 
-    await page.getByRole('button', { name: 'Share' }).click();
-
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
-    await selectVisibility.click();
-    await page.getByLabel('Connected').click();
+    await page.getByRole('link', { name: '401-doc-parent' }).click();
 
     await responsePromise;
 

src/frontend/apps/e2e/__tests__/app-impress/doc-search.spec.ts

@@ -1,6 +1,7 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, randomName, verifyDocName } from './common';
+import { createDoc, verifyDocName } from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -25,10 +26,7 @@ test.describe('Document search', () => {
     );
     await verifyDocName(page, doc2Title);
     await page.goto('/');
-    await page
-      .getByTestId('left-panel-desktop')
-      .getByRole('button', { name: 'search' })
-      .click();
+    await page.getByTestId('search-docs-button').click();
 
     await expect(
       page.getByRole('img', { name: 'No active search' }),
@@ -98,39 +96,44 @@ test.describe('Document search', () => {
     ).toBeHidden();
   });
 
-  test("it checks we don't see filters in search modal", async ({ page }) => {
-    const searchButton = page
-      .getByTestId('left-panel-desktop')
-      .getByRole('button', { name: 'search' });
-
-    await expect(searchButton).toBeVisible();
-    await page.getByRole('button', { name: 'search', exact: true }).click();
-    await expect(
-      page.getByRole('combobox', { name: 'Quick search input' }),
-    ).toBeVisible();
-    await expect(page.getByTestId('doc-search-filters')).toBeHidden();
-  });
-});
-
-test.describe('Sub page search', () => {
   test('it check the presence of filters in search modal', async ({
     page,
     browserName,
   }) => {
-    await page.goto('/');
-    const [doc1Title] = await createDoc(
-      page,
-      'My sub page search',
-      browserName,
-      1,
-    );
-    await verifyDocName(page, doc1Title);
-    const searchButton = page
-      .getByTestId('left-panel-desktop')
-      .getByRole('button', { name: 'search' });
-    await searchButton.click();
+    // Doc grid filters are not visible
+    const searchButton = page.getByTestId('search-docs-button');
+
     const filters = page.getByTestId('doc-search-filters');
+
+    await searchButton.click();
+    await expect(
+      page.getByRole('combobox', { name: 'Quick search input' }),
+    ).toBeVisible();
+    await expect(filters).toBeHidden();
+
+    await page.getByRole('button', { name: 'close' }).click();
+
+    // Create a doc without children for the moment
+    // and check that filters are not visible
+    const [doc1Title] = await createDoc(page, 'My page search', browserName, 1);
+    await verifyDocName(page, doc1Title);
+
+    await searchButton.click();
+    await expect(
+      page.getByRole('combobox', { name: 'Quick search input' }),
+    ).toBeVisible();
+    await expect(filters).toBeHidden();
+
+    await page.getByRole('button', { name: 'close' }).click();
+
+    // Create a sub page
+    // and check that filters are visible
+    await createRootSubPage(page, browserName, 'My sub page search');
+
+    await searchButton.click();
+
     await expect(filters).toBeVisible();
+
     await filters.click();
     await filters.getByRole('button', { name: 'Current doc' }).click();
     await expect(
@@ -139,43 +142,67 @@ test.describe('Sub page search', () => {
     await expect(
       page.getByRole('menuitem', { name: 'Current doc' }),
     ).toBeVisible();
-    await page.getByRole('menuitem', { name: 'Current doc' }).click();
+    await page.getByRole('menuitem', { name: 'All docs' }).click();
 
     await expect(page.getByRole('button', { name: 'Reset' })).toBeVisible();
   });
 
   test('it searches sub pages', async ({ page, browserName }) => {
-    await page.goto('/');
-
-    const [doc1Title] = await createDoc(
+    // First doc
+    const [firstDocTitle] = await createDoc(
       page,
-      'My sub page search',
+      'My first sub page search',
       browserName,
       1,
     );
-    await verifyDocName(page, doc1Title);
-    await page.getByRole('button', { name: 'New doc' }).click();
-    await verifyDocName(page, '');
-    await page.getByRole('textbox', { name: 'doc title input' }).click();
-    await page
-      .getByRole('textbox', { name: 'doc title input' })
-      .press('ControlOrMeta+a');
-    const [randomDocName] = randomName('doc-sub-page', browserName, 1);
-    await page
-      .getByRole('textbox', { name: 'doc title input' })
-      .fill(randomDocName);
-    const searchButton = page
-      .getByTestId('left-panel-desktop')
-      .getByRole('button', { name: 'search' });
+    await verifyDocName(page, firstDocTitle);
+
+    // Create a new doc - for the moment without children
+    const [secondDocTitle] = await createDoc(
+      page,
+      'My second sub page search',
+      browserName,
+      1,
+    );
+
+    const searchButton = page.getByTestId('search-docs-button');
 
     await searchButton.click();
-    await expect(
-      page.getByRole('button', { name: 'Current doc' }),
-    ).toBeVisible();
     await page.getByRole('combobox', { name: 'Quick search input' }).click();
     await page
       .getByRole('combobox', { name: 'Quick search input' })
-      .fill('sub');
-    await expect(page.getByLabel(randomDocName)).toBeVisible();
+      .fill('sub page search');
+
+    // Expect to find the first doc
+    await expect(
+      page.getByRole('presentation').getByLabel(firstDocTitle),
+    ).toBeVisible();
+    await expect(
+      page.getByRole('presentation').getByLabel(secondDocTitle),
+    ).toBeVisible();
+
+    await page.getByRole('button', { name: 'close' }).click();
+
+    // Create a sub page
+    const { name: secondChildDocTitle } = await createRootSubPage(
+      page,
+      browserName,
+      'second - Child doc',
+    );
+    await searchButton.click();
+    await page
+      .getByRole('combobox', { name: 'Quick search input' })
+      .fill('second');
+
+    // Now there is a sub page - expect to have the focus on the current doc
+    await expect(
+      page.getByRole('presentation').getByLabel(secondDocTitle),
+    ).toBeVisible();
+    await expect(
+      page.getByRole('presentation').getByLabel(secondChildDocTitle),
+    ).toBeVisible();
+    await expect(
+      page.getByRole('presentation').getByLabel(firstDocTitle),
+    ).toBeHidden();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-table-content.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, verifyDocName } from './common';
+import { createDoc, verifyDocName } from './utils-common';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');

src/frontend/apps/e2e/__tests__/app-impress/doc-tree.spec.ts

@@ -2,15 +2,15 @@
 import { expect, test } from '@playwright/test';
 
 import {
-  addNewMember,
   createDoc,
   expectLoginPage,
   keyCloakSignIn,
   randomName,
   updateDocTitle,
   verifyDocName,
-} from './common';
-import { clickOnAddRootSubPage, createRootSubPage } from './sub-pages-utils';
+} from './utils-common';
+import { addNewMember } from './utils-share';
+import { clickOnAddRootSubPage, createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc Tree', () => {
   test.beforeEach(async ({ page }) => {
@@ -25,7 +25,7 @@ test.describe('Doc Tree', () => {
       1,
     );
     await verifyDocName(page, titleParent);
-    const addButton = page.getByRole('button', { name: 'New doc' });
+    const addButton = page.getByTestId('new-doc-button');
     const docTree = page.getByTestId('doc-tree');
 
     await expect(addButton).toBeVisible();
@@ -63,7 +63,7 @@ test.describe('Doc Tree', () => {
 
   test('check the reorder of sub pages', async ({ page, browserName }) => {
     await createDoc(page, 'doc-tree-content', browserName, 1);
-    const addButton = page.getByRole('button', { name: 'New doc' });
+    const addButton = page.getByTestId('new-doc-button');
     await expect(addButton).toBeVisible();
 
     const docTree = page.getByTestId('doc-tree');
@@ -201,7 +201,7 @@ test.describe('Doc Tree', () => {
     ).not.toHaveText(docChild);
 
     const header = page.locator('header').first();
-    await header.locator('h2').getByText('Docs').click();
+    await header.locator('h1').getByText('Docs').click();
     await expect(page.getByText(docChild)).toBeVisible();
   });
 
@@ -259,6 +259,10 @@ test.describe('Doc Tree: Inheritance', () => {
   test.use({ storageState: { cookies: [], origins: [] } });
 
   test('A child inherit from the parent', async ({ page, browserName }) => {
+    // test.slow() to extend timeout since this scenario chains Keycloak login + redirects,
+    // doc creation/navigation and async doc-tree loading (/documents/:id/tree), which can exceed 30s (especially in CI).
+    test.slow();
+
     await page.goto('/');
     await keyCloakSignIn(page, browserName);
 
@@ -271,7 +275,7 @@ test.describe('Doc Tree: Inheritance', () => {
     await verifyDocName(page, docParent);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
 
     await page
@@ -307,6 +311,7 @@ test.describe('Doc Tree: Inheritance', () => {
     await expect(page.locator('h2').getByText(docChild)).toBeVisible();
 
     const docTree = page.getByTestId('doc-tree');
+    await expect(docTree).toBeVisible({ timeout: 10000 });
     await expect(docTree.getByText(docParent)).toBeVisible();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-version.spec.ts

@@ -5,7 +5,7 @@ import {
   goToGridDoc,
   mockedDocument,
   verifyDocName,
-} from './common';
+} from './utils-common';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');

src/frontend/apps/e2e/__tests__/app-impress/doc-visibility.spec.ts

@@ -6,8 +6,8 @@ import {
   expectLoginPage,
   keyCloakSignIn,
   verifyDocName,
-} from './common';
-import { createRootSubPage } from './sub-pages-utils';
+} from './utils-common';
+import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc Visibility', () => {
   test.beforeEach(async ({ page }) => {
@@ -41,7 +41,7 @@ test.describe('Doc Visibility', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
 
     await expect(selectVisibility.getByText('Private')).toBeVisible();
 
@@ -51,13 +51,13 @@ test.describe('Doc Visibility', () => {
     await selectVisibility.click();
     await page.getByLabel('Connected').click();
 
-    await expect(page.getByLabel('Visibility mode')).toBeVisible();
+    await expect(page.getByTestId('doc-access-mode')).toBeVisible();
 
     await selectVisibility.click();
 
     await page.getByLabel('Public', { exact: true }).click();
 
-    await expect(page.getByLabel('Visibility mode')).toBeVisible();
+    await expect(page.getByTestId('doc-access-mode')).toBeVisible();
   });
 });
 
@@ -122,9 +122,7 @@ test.describe('Doc Visibility: Restricted', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible({
+    await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
     });
 
@@ -178,9 +176,7 @@ test.describe('Doc Visibility: Restricted', () => {
 
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible();
+    await expect(page.getByTestId('header-logo-link')).toBeVisible();
 
     await page.goto(urlDoc);
 
@@ -209,7 +205,7 @@ test.describe('Doc Visibility: Public', () => {
     await verifyDocName(page, docTitle);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
 
     await page
@@ -222,8 +218,8 @@ test.describe('Doc Visibility: Public', () => {
       page.getByText('The document visibility has been updated.'),
     ).toBeVisible();
 
-    await expect(page.getByLabel('Visibility mode')).toBeVisible();
-    await page.getByLabel('Visibility mode').click();
+    await expect(page.getByTestId('doc-access-mode')).toBeVisible();
+    await page.getByTestId('doc-access-mode').click();
     await page
       .getByRole('menuitem', {
         name: 'Reading',
@@ -246,8 +242,8 @@ test.describe('Doc Visibility: Public', () => {
       cardContainer.getByText('Public document', { exact: true }),
     ).toBeVisible();
 
-    await expect(page.getByRole('button', { name: 'search' })).toBeVisible();
-    await expect(page.getByRole('button', { name: 'New doc' })).toBeVisible();
+    await expect(page.getByTestId('search-docs-button')).toBeVisible();
+    await expect(page.getByTestId('new-doc-button')).toBeVisible();
 
     const urlDoc = page.url();
 
@@ -262,8 +258,8 @@ test.describe('Doc Visibility: Public', () => {
     await page.goto(urlDoc);
 
     await expect(page.locator('h2').getByText(docTitle)).toBeVisible();
-    await expect(page.getByRole('button', { name: 'search' })).toBeHidden();
-    await expect(page.getByRole('button', { name: 'New doc' })).toBeHidden();
+    await expect(page.getByTestId('search-docs-button')).toBeHidden();
+    await expect(page.getByTestId('new-doc-button')).toBeHidden();
     await expect(page.getByRole('button', { name: 'Share' })).toBeVisible();
     const card = page.getByLabel('It is the card information');
     await expect(card).toBeVisible();
@@ -293,7 +289,7 @@ test.describe('Doc Visibility: Public', () => {
     await verifyDocName(page, docTitle);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
 
     await page
@@ -306,7 +302,7 @@ test.describe('Doc Visibility: Public', () => {
       page.getByText('The document visibility has been updated.'),
     ).toBeVisible();
 
-    await page.getByLabel('Visibility mode').click();
+    await page.getByTestId('doc-access-mode').click();
     await page.getByLabel('Editing').click();
 
     await expect(
@@ -362,7 +358,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     await verifyDocName(page, docTitle);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
     await page
       .getByRole('menuitem', {
@@ -414,7 +410,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     await verifyDocName(page, docTitle);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
     await page
       .getByRole('menuitem', {
@@ -455,9 +451,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     const otherBrowser = BROWSERS.find((b) => b !== browserName);
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible({
+    await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
     });
 
@@ -501,6 +495,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     page,
     browserName,
   }) => {
+    test.slow();
     await page.goto('/');
     await keyCloakSignIn(page, browserName);
 
@@ -514,7 +509,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     await verifyDocName(page, docTitle);
 
     await page.getByRole('button', { name: 'Share' }).click();
-    const selectVisibility = page.getByLabel('Visibility', { exact: true });
+    const selectVisibility = page.getByTestId('doc-visibility');
     await selectVisibility.click();
     await page
       .getByRole('menuitem', {
@@ -527,7 +522,7 @@ test.describe('Doc Visibility: Authenticated', () => {
     ).toBeVisible();
 
     const urlDoc = page.url();
-    await page.getByLabel('Visibility mode').click();
+    await page.getByTestId('doc-access-mode').click();
     await page.getByLabel('Editing').click();
 
     await expect(
@@ -545,15 +540,17 @@ test.describe('Doc Visibility: Authenticated', () => {
     const otherBrowser = BROWSERS.find((b) => b !== browserName);
     await keyCloakSignIn(page, otherBrowser!);
 
-    await expect(
-      page.getByRole('link', { name: 'Docs Logo Docs' }),
-    ).toBeVisible();
+    await expect(page.getByTestId('header-logo-link')).toBeVisible({
+      timeout: 10000,
+    });
 
     await page.goto(urlDoc);
 
     await verifyDocName(page, docTitle);
     await page.getByRole('button', { name: 'Share' }).click();
     await page.getByRole('button', { name: 'Copy link' }).click();
-    await expect(page.getByText('Link Copied !')).toBeVisible();
+    await expect(page.getByText('Link Copied !')).toBeVisible({
+      timeout: 10000,
+    });
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/footer.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { overrideConfig } from './common';
+import { overrideConfig } from './utils-common';
 
 test.describe('Footer', () => {
   test.use({ storageState: { cookies: [], origins: [] } });

src/frontend/apps/e2e/__tests__/app-impress/header.spec.ts

@@ -1,6 +1,10 @@
 import { expect, test } from '@playwright/test';
 
-import { expectLoginPage, keyCloakSignIn, overrideConfig } from './common';
+import {
+  expectLoginPage,
+  keyCloakSignIn,
+  overrideConfig,
+} from './utils-common';
 
 test.describe('Header', () => {
   test('checks all the elements are visible', async ({ page }) => {
@@ -8,8 +12,8 @@ test.describe('Header', () => {
 
     const header = page.locator('header').first();
 
-    await expect(header.getByLabel('Docs Logo')).toBeVisible();
-    await expect(header.locator('h2').getByText('Docs')).toHaveCSS(
+    await expect(header.getByTestId('header-logo-link')).toBeVisible();
+    await expect(header.locator('h1').getByText('Docs')).toHaveCSS(
       'font-family',
       /Roboto/i,
     );
@@ -33,8 +37,8 @@ test.describe('Header', () => {
 
     const header = page.locator('header').first();
 
-    await expect(header.getByLabel('Docs Logo')).toBeVisible();
-    await expect(header.locator('h2').getByText('Docs')).toHaveCSS(
+    await expect(header.getByTestId('header-icon-docs')).toBeVisible();
+    await expect(header.locator('h1').getByText('Docs')).toHaveCSS(
       'font-family',
       /Marianne/i,
     );
@@ -102,7 +106,7 @@ test.describe('Header mobile', () => {
     const header = page.locator('header').first();
 
     await expect(header.getByLabel('Open the header menu')).toBeVisible();
-    await expect(header.getByRole('link', { name: 'Docs Logo' })).toBeVisible();
+    await expect(header.getByTestId('header-icon-docs')).toBeVisible();
     await expect(
       header.getByRole('button', {
         name: 'Les services de La Suite numérique',

src/frontend/apps/e2e/__tests__/app-impress/home.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { overrideConfig } from './common';
+import { overrideConfig } from './utils-common';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/docs/');
@@ -15,10 +15,13 @@ test.describe('Home page', () => {
     const header = page.locator('header').first();
     const footer = page.locator('footer').first();
     await expect(header).toBeVisible();
-    await expect(
-      header.getByRole('button', { name: /Language/ }),
-    ).toBeVisible();
-    await expect(header.getByRole('img', { name: 'Docs logo' })).toBeVisible();
+
+    const languageButton = page.getByRole('button', {
+      name: /Language|Select language/,
+    });
+    await expect(languageButton).toBeVisible();
+
+    await expect(header.getByTestId('header-icon-docs')).toBeVisible();
     await expect(header.getByRole('heading', { name: 'Docs' })).toBeVisible();
 
     // Check the titles
@@ -65,20 +68,31 @@ test.describe('Home page', () => {
 
     await page.goto('/docs/');
 
+    // Wait for the page to be fully loaded and responsive store to be initialized
+    await page.waitForLoadState('domcontentloaded');
+
+    // Wait a bit more for the responsive store to be initialized
+    await page.waitForTimeout(500);
+
     // Check header content
     const header = page.locator('header').first();
     const footer = page.locator('footer').first();
     await expect(header).toBeVisible();
-    await expect(
-      header.getByRole('button', { name: /Language/ }),
-    ).toBeVisible();
+
+    // Check for language picker - it should be visible on desktop
+    // Use a more flexible selector that works with both Header and HomeHeader
+    const languageButton = page.getByRole('button', {
+      name: /Language|Select language/,
+    });
+    await expect(languageButton).toBeVisible();
+
     await expect(
       header.getByRole('button', { name: 'Les services de La Suite numé' }),
     ).toBeVisible();
     await expect(
       header.getByRole('img', { name: 'Gouvernement Logo' }),
     ).toBeVisible();
-    await expect(header.getByRole('img', { name: 'Docs logo' })).toBeVisible();
+    await expect(header.getByTestId('header-icon-docs')).toBeVisible();
     await expect(header.getByRole('heading', { name: 'Docs' })).toBeVisible();
 
     // Check the titles

src/frontend/apps/e2e/__tests__/app-impress/language.spec.ts

@@ -1,30 +1,17 @@
-import { Page, expect, test } from '@playwright/test';
+import { expect, test } from '@playwright/test';
 
-import { createDoc } from './common';
-
-test.describe.serial('Language', () => {
-  let page: Page;
-
-  test.beforeAll(async ({ browser }) => {
-    page = await browser.newPage();
-  });
-
-  test.afterAll(async () => {
-    await page.close();
-  });
+import { TestLanguage, createDoc, waitForLanguageSwitch } from './utils-common';
 
+test.describe('Language', () => {
   test.beforeEach(async ({ page }) => {
     await page.goto('/');
-    await waitForLanguageSwitch(page, TestLanguage.English);
-  });
-
-  test.afterEach(async ({ page }) => {
-    // Switch back to English - important for other tests to run as expected
-    await waitForLanguageSwitch(page, TestLanguage.English);
   });
 
   test('checks language switching', async ({ page }) => {
     const header = page.locator('header').first();
+    const languagePicker = header.locator('.--docs--language-picker-text');
+
+    await expect(page.locator('html')).toHaveAttribute('lang', 'en-us');
 
     // initial language should be english
     await expect(
@@ -36,17 +23,57 @@ test.describe.serial('Language', () => {
     // switch to french
     await waitForLanguageSwitch(page, TestLanguage.French);
 
+    await expect(page.locator('html')).toHaveAttribute('lang', 'fr');
+
     await expect(
       header.getByRole('button').getByText('Français'),
     ).toBeVisible();
 
     await expect(page.getByLabel('Se déconnecter')).toBeVisible();
 
-    await header.getByRole('button').getByText('Français').click();
-    await page.getByLabel('Deutsch').click();
+    // Switch to German using the utility function for consistency
+    await waitForLanguageSwitch(page, TestLanguage.German);
     await expect(header.getByRole('button').getByText('Deutsch')).toBeVisible();
 
     await expect(page.getByLabel('Abmelden')).toBeVisible();
+
+    await expect(page.locator('html')).toHaveAttribute('lang', 'de');
+
+    await languagePicker.click();
+
+    await expect(page.locator('[role="menu"]')).toBeVisible();
+
+    const menuItems = page.getByRole('menuitem');
+    await expect(menuItems.first()).toBeVisible();
+
+    await menuItems.first().click();
+
+    await expect(page.locator('html')).toHaveAttribute('lang', 'en');
+    await expect(languagePicker).toContainText('English');
+  });
+  test('can switch language using only keyboard', async ({ page }) => {
+    await page.goto('/');
+    await waitForLanguageSwitch(page, TestLanguage.English);
+
+    const languagePicker = page.getByRole('button', {
+      name: /select language/i,
+    });
+
+    await expect(languagePicker).toBeVisible();
+
+    await page.keyboard.press('Tab');
+    await page.keyboard.press('Tab');
+    await page.keyboard.press('Tab');
+
+    await page.keyboard.press('Enter');
+
+    const menu = page.getByRole('menu');
+    await expect(menu).toBeVisible();
+
+    await page.keyboard.press('ArrowDown');
+    await page.keyboard.press('Enter');
+
+    await expect(page.locator('html')).not.toHaveAttribute('lang', 'en-us');
   });
 
   test('checks that backend uses the same language as the frontend', async ({
@@ -94,48 +121,3 @@ test.describe.serial('Language', () => {
     await expect(page.getByText('Titres', { exact: true })).toBeVisible();
   });
 });
-
-// language helper
-export const TestLanguage = {
-  English: {
-    label: 'English',
-    expectedLocale: ['en-us'],
-  },
-  French: {
-    label: 'Français',
-    expectedLocale: ['fr-fr'],
-  },
-  German: {
-    label: 'Deutsch',
-    expectedLocale: ['de-de'],
-  },
-} as const;
-
-type TestLanguageKey = keyof typeof TestLanguage;
-type TestLanguageValue = (typeof TestLanguage)[TestLanguageKey];
-
-export async function waitForLanguageSwitch(
-  page: Page,
-  lang: TestLanguageValue,
-) {
-  const header = page.locator('header').first();
-  const languagePicker = header.locator('.--docs--language-picker-text');
-  const isAlreadyTargetLanguage = await languagePicker
-    .innerText()
-    .then((text) => text.toLowerCase().includes(lang.label.toLowerCase()));
-
-  if (isAlreadyTargetLanguage) {
-    return;
-  }
-
-  await languagePicker.click();
-  const responsePromise = page.waitForResponse(
-    (resp) =>
-      resp.url().includes('/user') && resp.request().method() === 'PATCH',
-  );
-  await page.getByLabel(lang.label).click();
-  const resolvedResponsePromise = await responsePromise;
-  const responseData = await resolvedResponsePromise.json();
-
-  expect(lang.expectedLocale).toContain(responseData.language);
-}

src/frontend/apps/e2e/__tests__/app-impress/left-panel.spec.ts

@@ -8,8 +8,8 @@ test.describe('Left panel desktop', () => {
   test('checks all the elements are visible', async ({ page }) => {
     await expect(page.getByTestId('left-panel-desktop')).toBeVisible();
     await expect(page.getByTestId('left-panel-mobile')).toBeHidden();
-    await expect(page.getByRole('button', { name: 'house' })).toBeVisible();
-    await expect(page.getByRole('button', { name: 'New doc' })).toBeVisible();
+    await expect(page.getByTestId('home-button')).toBeVisible();
+    await expect(page.getByTestId('new-doc-button')).toBeVisible();
   });
 });
 
@@ -27,9 +27,11 @@ test.describe('Left panel mobile', () => {
     await expect(page.getByTestId('left-panel-mobile')).not.toBeInViewport();
 
     const header = page.locator('header').first();
-    const homeButton = page.getByRole('button', { name: 'house' });
-    const newDocButton = page.getByRole('button', { name: 'New doc' });
-    const languageButton = page.getByRole('button', { name: /Language/ });
+    const homeButton = page.getByTestId('home-button');
+    const newDocButton = page.getByTestId('new-doc-button');
+    const languageButton = page.getByRole('button', {
+      name: 'Select language',
+    });
     const logoutButton = page.getByRole('button', { name: 'Logout' });
 
     await expect(homeButton).not.toBeInViewport();

src/frontend/apps/e2e/__tests__/app-impress/share-utils.ts

@@ -1,158 +0,0 @@
-import { Locator, Page, expect } from '@playwright/test';
-
-export type UserSearchResult = {
-  email: string;
-  full_name?: string | null;
-};
-
-export type Role = 'Administrator' | 'Owner' | 'Member' | 'Editor' | 'Reader';
-export type LinkReach = 'Private' | 'Connected' | 'Public';
-export type LinkRole = 'Reading' | 'Edition';
-
-export const searchUserToInviteToDoc = async (
-  page: Page,
-  inputFill?: string,
-): Promise<UserSearchResult[]> => {
-  const inputFillValue = inputFill ?? 'user ';
-
-  const responsePromise = page.waitForResponse(
-    (response) =>
-      response
-        .url()
-        .includes(`/users/?q=${encodeURIComponent(inputFillValue)}`) &&
-      response.status() === 200,
-  );
-
-  await page.getByRole('button', { name: 'Share' }).click();
-  const inputSearch = page.getByRole('combobox', {
-    name: 'Quick search input',
-  });
-  await expect(inputSearch).toBeVisible();
-  await inputSearch.fill(inputFillValue);
-  const response = await responsePromise;
-  const users = (await response.json()) as UserSearchResult[];
-  return users;
-};
-
-export const addMemberToDoc = async (
-  page: Page,
-  role: Role,
-  users: UserSearchResult[],
-) => {
-  const list = page.getByTestId('doc-share-add-member-list');
-  await expect(list).toBeHidden();
-  const quickSearchContent = page.getByTestId('doc-share-quick-search');
-  for (const user of users) {
-    await quickSearchContent
-      .getByTestId(`search-user-row-${user.email}`)
-      .click();
-  }
-
-  await list.getByLabel('doc-role-dropdown').click();
-  await expect(page.getByLabel(role)).toBeVisible();
-  await page.getByLabel(role).click();
-  await page.getByRole('button', { name: 'Invite' }).click();
-};
-
-export const verifyMemberAddedToDoc = async (
-  page: Page,
-  user: UserSearchResult,
-  role: Role,
-): Promise<Locator> => {
-  const container = page.getByLabel('List members card');
-  await expect(container).toBeVisible();
-  const userRow = container.getByTestId(`doc-share-member-row-${user.email}`);
-  await expect(userRow).toBeVisible();
-  await expect(userRow.getByText(role)).toBeVisible();
-  await expect(userRow.getByText(user.full_name || user.email)).toBeVisible();
-  return userRow;
-};
-
-export const updateShareLink = async (
-  page: Page,
-  linkReach: LinkReach,
-  linkRole?: LinkRole | null,
-) => {
-  await page.getByRole('button', { name: 'Visibility', exact: true }).click();
-  await page.getByRole('menuitem', { name: linkReach }).click();
-
-  const visibilityUpdatedText = page
-    .getByText('The document visibility has been updated')
-    .first();
-
-  await expect(visibilityUpdatedText).toBeVisible();
-
-  if (linkRole) {
-    await page
-      .getByRole('button', { name: 'Visibility mode', exact: true })
-      .click();
-    await page.getByRole('menuitem', { name: linkRole }).click();
-    await expect(visibilityUpdatedText).toBeVisible();
-  }
-};
-
-export const verifyLinkReachIsDisabled = async (
-  page: Page,
-  linkReach: LinkReach,
-) => {
-  await page.getByRole('button', { name: 'Visibility', exact: true }).click();
-  const item = page.getByRole('menuitem', { name: linkReach });
-  await expect(item).toBeDisabled();
-  await page.click('body');
-};
-
-export const verifyLinkReachIsEnabled = async (
-  page: Page,
-  linkReach: LinkReach,
-) => {
-  await page.getByRole('button', { name: 'Visibility', exact: true }).click();
-  const item = page.getByRole('menuitem', { name: linkReach });
-  await expect(item).toBeEnabled();
-  await page.click('body');
-};
-
-export const verifyLinkRoleIsDisabled = async (
-  page: Page,
-  linkRole: LinkRole,
-) => {
-  await page
-    .getByRole('button', { name: 'Visibility mode', exact: true })
-    .click();
-  const item = page.getByRole('menuitem', { name: linkRole });
-  await expect(item).toBeDisabled();
-  await page.click('body');
-};
-
-export const verifyLinkRoleIsEnabled = async (
-  page: Page,
-  linkRole: LinkRole,
-) => {
-  await page
-    .getByRole('button', { name: 'Visibility mode', exact: true })
-    .click();
-  const item = page.getByRole('menuitem', { name: linkRole });
-  await expect(item).toBeEnabled();
-  await page.click('body');
-};
-
-export const verifyShareLink = async (
-  page: Page,
-  linkReach: LinkReach,
-  linkRole?: LinkRole | null,
-) => {
-  const visibilityDropdownButton = page.getByRole('button', {
-    name: 'Visibility',
-    exact: true,
-  });
-  await expect(visibilityDropdownButton).toBeVisible();
-  await expect(visibilityDropdownButton.getByText(linkReach)).toBeVisible();
-
-  if (linkRole) {
-    const visibilityModeButton = page.getByRole('button', {
-      name: 'Visibility mode',
-      exact: true,
-    });
-    await expect(visibilityModeButton).toBeVisible();
-    await expect(page.getByText(linkRole)).toBeVisible();
-  }
-};

src/frontend/apps/e2e/__tests__/app-impress/sub-pages-utils.ts

@@ -1,80 +0,0 @@
-import { Page, expect } from '@playwright/test';
-
-import { randomName, updateDocTitle, waitForResponseCreateDoc } from './common';
-
-export const createRootSubPage = async (
-  page: Page,
-  browserName: string,
-  docName: string,
-) => {
-  // Get response
-  const responsePromise = waitForResponseCreateDoc(page);
-  await clickOnAddRootSubPage(page);
-  const response = await responsePromise;
-  expect(response.ok()).toBeTruthy();
-  const subPageJson = (await response.json()) as { id: string };
-
-  // Get doc tree
-  const docTree = page.getByTestId('doc-tree');
-  await expect(docTree).toBeVisible();
-
-  // Get sub page item
-  const subPageItem = docTree
-    .getByTestId(`doc-sub-page-item-${subPageJson.id}`)
-    .first();
-  await expect(subPageItem).toBeVisible();
-  await subPageItem.click();
-
-  // Update sub page name
-  const randomDocs = randomName(docName, browserName, 1);
-  await updateDocTitle(page, randomDocs[0]);
-
-  // Return sub page data
-  return { name: randomDocs[0], docTreeItem: subPageItem, item: subPageJson };
-};
-
-export const clickOnAddRootSubPage = async (page: Page) => {
-  const rootItem = page.getByTestId('doc-tree-root-item');
-  await expect(rootItem).toBeVisible();
-  await rootItem.hover();
-  await rootItem.getByRole('button', { name: 'add_box' }).click();
-};
-
-export const createSubPageFromParent = async (
-  page: Page,
-  browserName: string,
-  parentId: string,
-  subPageName: string,
-) => {
-  // Get parent doc tree item
-  const parentDocTreeItem = page.getByTestId(`doc-sub-page-item-${parentId}`);
-  await expect(parentDocTreeItem).toBeVisible();
-  await parentDocTreeItem.hover();
-
-  // Create sub page
-  const responsePromise = waitForResponseCreateDoc(page);
-  await parentDocTreeItem.getByRole('button', { name: 'add_box' }).click();
-
-  // Get response
-  const response = await responsePromise;
-  expect(response.ok()).toBeTruthy();
-  const subPageJson = (await response.json()) as { id: string };
-
-  // Get doc tree
-  const docTree = page.getByTestId('doc-tree');
-  await expect(docTree).toBeVisible();
-
-  // Get sub page item
-  const subPageItem = docTree
-    .getByTestId(`doc-sub-page-item-${subPageJson.id}`)
-    .first();
-  await expect(subPageItem).toBeVisible();
-  await subPageItem.click();
-
-  // Update sub page name
-  const subPageTitle = randomName(subPageName, browserName, 1)[0];
-  await updateDocTitle(page, subPageTitle);
-
-  // Return sub page data
-  return { name: subPageTitle, docTreeItem: subPageItem, item: subPageJson };
-};

src/frontend/apps/e2e/__tests__/app-impress/utils-common.ts

@@ -78,14 +78,16 @@ export const createDoc = async (
   docName: string,
   browserName: string,
   length: number = 1,
-  isChild: boolean = false,
+  isMobile: boolean = false,
 ) => {
   const randomDocs = randomName(docName, browserName, length);
 
   for (let i = 0; i < randomDocs.length; i++) {
-    if (!isChild) {
-      const header = page.locator('header').first();
-      await header.locator('h2').getByText('Docs').click();
+    if (isMobile) {
+      await page
+        .getByRole('button', { name: 'Open the header menu' })
+        .getByText('menu')
+        .click();
     }
 
     await page
@@ -127,42 +129,6 @@ export const verifyDocName = async (page: Page, docName: string) => {
   }
 };
 
-export const addNewMember = async (
-  page: Page,
-  index: number,
-  role: 'Administrator' | 'Owner' | 'Editor' | 'Reader',
-  fillText: string = 'user ',
-) => {
-  const responsePromiseSearchUser = page.waitForResponse(
-    (response) =>
-      response.url().includes(`/users/?q=${encodeURIComponent(fillText)}`) &&
-      response.status() === 200,
-  );
-
-  const inputSearch = page.getByRole('combobox', {
-    name: 'Quick search input',
-  });
-
-  // Select a new user
-  await inputSearch.fill(fillText);
-
-  // Intercept response
-  const responseSearchUser = await responsePromiseSearchUser;
-  const users = (await responseSearchUser.json()) as {
-    email: string;
-  }[];
-
-  // Choose user
-  await page.getByRole('option', { name: users[index].email }).click();
-
-  // Choose a role
-  await page.getByLabel('doc-role-dropdown').click();
-  await page.getByLabel(role).click();
-  await page.getByRole('button', { name: 'Invite' }).click();
-
-  return users[index].email;
-};
-
 export const getGridRow = async (page: Page, title: string) => {
   const docsGrid = page.getByRole('grid');
   await expect(docsGrid).toBeVisible();
@@ -188,7 +154,7 @@ export const goToGridDoc = async (
   { nthRow = 1, title }: GoToGridDocOptions = {},
 ) => {
   const header = page.locator('header').first();
-  await header.locator('h2').getByText('Docs').click();
+  await header.locator('h1').getByText('Docs').click();
 
   const docsGrid = page.getByTestId('docs-grid');
   await expect(docsGrid).toBeVisible();
@@ -301,38 +267,40 @@ export const mockedListDocs = async (page: Page, data: object[] = []) => {
   });
 };
 
-export const mockedInvitations = async (page: Page, json?: object) => {
-  let result = [
-    {
-      id: '120ec765-43af-4602-83eb-7f4e1224548a',
-      abilities: {
-        destroy: true,
-        update: true,
-        partial_update: true,
-        retrieve: true,
-      },
-      created_at: '2024-10-03T12:19:26.107687Z',
-      email: 'test@invitation.test',
-      document: '4888c328-8406-4412-9b0b-c0ba5b9e5fb6',
-      role: 'editor',
-      issuer: '7380f42f-02eb-4ad5-b8f0-037a0e66066d',
-      is_expired: false,
-      ...json,
-    },
-  ];
-  await page.route('**/invitations/**/', async (route) => {
-    const request = route.request();
-    if (
-      request.method().includes('GET') &&
-      request.url().includes('invitations') &&
-      request.url().includes('page=')
-    ) {
+export const expectLoginPage = async (page: Page) =>
+  await expect(
+    page.getByRole('heading', { name: 'Collaborative writing' }),
+  ).toBeVisible({
+    timeout: 10000,
+  });
+// language helper
+export const TestLanguage = {
+  English: {
+    label: 'English',
+    expectedLocale: ['en-us'],
+  },
+  French: {
+    label: 'Français',
+    expectedLocale: ['fr-fr'],
+  },
+  German: {
+    label: 'Deutsch',
+    expectedLocale: ['de-de'],
+  },
+} as const;
+
+type TestLanguageKey = keyof typeof TestLanguage;
+type TestLanguageValue = (typeof TestLanguage)[TestLanguageKey];
+
+export async function waitForLanguageSwitch(
+  page: Page,
+  lang: TestLanguageValue,
+) {
+  await page.route('**/api/v1.0/users/**', async (route, request) => {
+    if (request.method().includes('PATCH')) {
       await route.fulfill({
         json: {
-          count: 1,
-          next: null,
-          previous: null,
-          results: result,
+          language: lang.expectedLocale[0],
         },
       });
     } else {
@@ -340,71 +308,17 @@ export const mockedInvitations = async (page: Page, json?: object) => {
     }
   });
 
-  await page.route(
-    '**/invitations/120ec765-43af-4602-83eb-7f4e1224548a/**/',
-    async (route) => {
-      const request = route.request();
-      if (request.method().includes('DELETE')) {
-        result = [];
+  const header = page.locator('header').first();
+  const languagePicker = header.locator('.--docs--language-picker-text');
+  const isAlreadyTargetLanguage = await languagePicker
+    .innerText()
+    .then((text) => text.toLowerCase().includes(lang.label.toLowerCase()));
 
-        await route.fulfill({
-          json: {},
-        });
-      }
-    },
-  );
-};
+  if (isAlreadyTargetLanguage) {
+    return;
+  }
 
-export const mockedAccesses = async (page: Page, json?: object) => {
-  await page.route('**/accesses/**/', async (route) => {
-    const request = route.request();
+  await languagePicker.click();
 
-    if (
-      request.method().includes('GET') &&
-      request.url().includes('accesses')
-    ) {
-      await route.fulfill({
-        json: [
-          {
-            id: 'bc8bbbc5-a635-4f65-9817-fd1e9ec8ef87',
-            user: {
-              id: 'b4a21bb3-722e-426c-9f78-9d190eda641c',
-              email: 'test@accesses.test',
-            },
-            team: '',
-            max_ancestors_role: null,
-            max_role: 'reader',
-            role: 'reader',
-            document: {
-              id: 'mocked-document-id',
-              path: '000000',
-              depth: 1,
-            },
-            abilities: {
-              destroy: true,
-              update: true,
-              partial_update: true,
-              retrieve: true,
-              link_select_options: {
-                public: ['reader', 'editor'],
-                authenticated: ['reader', 'editor'],
-                restricted: null,
-              },
-              set_role_to: ['administrator', 'editor'],
-            },
-            ...json,
-          },
-        ],
-      });
-    } else {
-      await route.continue();
-    }
-  });
-};
-
-export const expectLoginPage = async (page: Page) =>
-  await expect(
-    page.getByRole('heading', { name: 'Collaborative writing' }),
-  ).toBeVisible({
-    timeout: 10000,
-  });
+  await page.getByLabel(lang.label).click();
+}

src/frontend/apps/e2e/__tests__/app-impress/utils-share.ts

@@ -0,0 +1,163 @@
+import { Page, expect } from '@playwright/test';
+
+export type Role = 'Administrator' | 'Owner' | 'Member' | 'Editor' | 'Reader';
+export type LinkReach = 'Private' | 'Connected' | 'Public';
+export type LinkRole = 'Reading' | 'Edition';
+
+export const addNewMember = async (
+  page: Page,
+  index: number,
+  role: 'Administrator' | 'Owner' | 'Editor' | 'Reader',
+  fillText: string = 'user ',
+) => {
+  const responsePromiseSearchUser = page.waitForResponse(
+    (response) =>
+      response.url().includes(`/users/?q=${encodeURIComponent(fillText)}`) &&
+      response.status() === 200,
+  );
+
+  const inputSearch = page.getByRole('combobox', {
+    name: 'Quick search input',
+  });
+
+  // Select a new user
+  await inputSearch.fill(fillText);
+
+  // Intercept response
+  const responseSearchUser = await responsePromiseSearchUser;
+  const users = (await responseSearchUser.json()) as {
+    email: string;
+  }[];
+
+  // Choose user
+  await page.getByRole('option', { name: users[index].email }).click();
+
+  // Choose a role
+  await page.getByLabel('doc-role-dropdown').click();
+  await page.getByLabel(role).click();
+  await page.getByRole('button', { name: 'Invite' }).click();
+
+  return users[index].email;
+};
+
+export const updateShareLink = async (
+  page: Page,
+  linkReach: LinkReach,
+  linkRole?: LinkRole | null,
+) => {
+  await page.getByTestId('doc-visibility').click();
+  await page.getByRole('menuitem', { name: linkReach }).click();
+
+  const visibilityUpdatedText = page
+    .getByText('The document visibility has been updated')
+    .first();
+
+  await expect(visibilityUpdatedText).toBeVisible();
+
+  if (linkRole) {
+    await page.getByTestId('doc-access-mode').click();
+    await page.getByRole('menuitem', { name: linkRole }).click();
+    await expect(visibilityUpdatedText).toBeVisible();
+  }
+};
+
+export const mockedInvitations = async (page: Page, json?: object) => {
+  let result = [
+    {
+      id: '120ec765-43af-4602-83eb-7f4e1224548a',
+      abilities: {
+        destroy: true,
+        update: true,
+        partial_update: true,
+        retrieve: true,
+      },
+      created_at: '2024-10-03T12:19:26.107687Z',
+      email: 'test@invitation.test',
+      document: '4888c328-8406-4412-9b0b-c0ba5b9e5fb6',
+      role: 'editor',
+      issuer: '7380f42f-02eb-4ad5-b8f0-037a0e66066d',
+      is_expired: false,
+      ...json,
+    },
+  ];
+  await page.route('**/invitations/**/', async (route) => {
+    const request = route.request();
+    if (
+      request.method().includes('GET') &&
+      request.url().includes('invitations') &&
+      request.url().includes('page=')
+    ) {
+      await route.fulfill({
+        json: {
+          count: 1,
+          next: null,
+          previous: null,
+          results: result,
+        },
+      });
+    } else {
+      await route.continue();
+    }
+  });
+
+  await page.route(
+    '**/invitations/120ec765-43af-4602-83eb-7f4e1224548a/**/',
+    async (route) => {
+      const request = route.request();
+      if (request.method().includes('DELETE')) {
+        result = [];
+
+        await route.fulfill({
+          json: {},
+        });
+      }
+    },
+  );
+};
+
+export const mockedAccesses = async (page: Page, json?: object) => {
+  await page.route('**/accesses/**/', async (route) => {
+    const request = route.request();
+
+    if (
+      request.method().includes('GET') &&
+      request.url().includes('accesses')
+    ) {
+      await route.fulfill({
+        json: [
+          {
+            id: 'bc8bbbc5-a635-4f65-9817-fd1e9ec8ef87',
+            user: {
+              id: 'b4a21bb3-722e-426c-9f78-9d190eda641c',
+              email: 'test@accesses.test',
+            },
+            team: '',
+            max_ancestors_role: null,
+            max_role: 'reader',
+            role: 'reader',
+            document: {
+              id: 'mocked-document-id',
+              path: '000000',
+              depth: 1,
+            },
+            abilities: {
+              destroy: true,
+              update: true,
+              partial_update: true,
+              retrieve: true,
+              link_select_options: {
+                public: ['reader', 'editor'],
+                authenticated: ['reader', 'editor'],
+                restricted: null,
+              },
+              set_role_to: ['administrator', 'editor'],
+            },
+            ...json,
+          },
+        ],
+      });
+    } else {
+      await route.continue();
+    }
+  });
+};

src/frontend/apps/e2e/__tests__/app-impress/utils-sub-pages.ts

@@ -0,0 +1,67 @@
+import { Page, expect } from '@playwright/test';
+
+import {
+  randomName,
+  updateDocTitle,
+  waitForResponseCreateDoc,
+} from './utils-common';
+
+export const createRootSubPage = async (
+  page: Page,
+  browserName: string,
+  docName: string,
+  isMobile: boolean = false,
+) => {
+  if (isMobile) {
+    await page
+      .getByRole('button', { name: 'Open the header menu' })
+      .getByText('menu')
+      .click();
+  }
+
+  // Get response
+  const responsePromise = waitForResponseCreateDoc(page);
+  await clickOnAddRootSubPage(page);
+  const response = await responsePromise;
+  expect(response.ok()).toBeTruthy();
+  const subPageJson = (await response.json()) as { id: string };
+
+  if (isMobile) {
+    await page
+      .getByRole('button', { name: 'Open the header menu' })
+      .getByText('menu')
+      .click();
+  }
+
+  // Get doc tree
+  const docTree = page.getByTestId('doc-tree');
+  await expect(docTree).toBeVisible();
+
+  // Get sub page item
+  const subPageItem = docTree
+    .getByTestId(`doc-sub-page-item-${subPageJson.id}`)
+    .first();
+  await expect(subPageItem).toBeVisible();
+  await subPageItem.click();
+
+  if (isMobile) {
+    await page
+      .getByRole('button', { name: 'Open the header menu' })
+      .getByText('close')
+      .click();
+  }
+
+  // Update sub page name
+  const randomDocs = randomName(docName, browserName, 1);
+  await updateDocTitle(page, randomDocs[0]);
+
+  // Return sub page data
+  return { name: randomDocs[0], docTreeItem: subPageItem, item: subPageJson };
+};
+
+export const clickOnAddRootSubPage = async (page: Page) => {
+  const rootItem = page.getByTestId('doc-tree-root-item');
+  await expect(rootItem).toBeVisible();
+  await rootItem.hover();
+  await rootItem.getByRole('button', { name: 'add_box' }).click();
+};

src/frontend/apps/e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-e2e",
-  "version": "3.4.2",
+  "version": "3.5.0",
   "private": true,
   "scripts": {
     "lint": "eslint . --ext .ts",
@@ -12,7 +12,7 @@
     "test:ui::chromium": "yarn test:ui --project=chromium"
   },
   "devDependencies": {
-    "@playwright/test": "1.54.1",
+    "@playwright/test": "1.54.2",
     "@types/node": "*",
     "@types/pdf-parse": "1.1.5",
     "eslint-config-impress": "*",

src/frontend/apps/impress/package.json

@@ -1,6 +1,6 @@
 {
   "name": "app-impress",
-  "version": "3.4.2",
+  "version": "3.5.0",
   "private": true,
   "scripts": {
     "dev": "next dev",
@@ -16,24 +16,25 @@
   },
   "dependencies": {
     "@ag-media/react-pdf-table": "2.0.3",
-    "@blocknote/code-block": "0.33.0",
-    "@blocknote/core": "0.33.0",
-    "@blocknote/mantine": "0.33.0",
-    "@blocknote/react": "0.33.0",
-    "@blocknote/xl-docx-exporter": "0.33.0",
-    "@blocknote/xl-pdf-exporter": "0.33.0",
+    "@blocknote/code-block": "0.35.0",
+    "@blocknote/core": "0.35.0",
+    "@blocknote/mantine": "0.35.0",
+    "@blocknote/react": "0.35.0",
+    "@blocknote/xl-docx-exporter": "0.35.0",
+    "@blocknote/xl-multi-column": "0.35.0",
+    "@blocknote/xl-pdf-exporter": "0.35.0",
     "@dnd-kit/core": "6.3.1",
     "@dnd-kit/modifiers": "9.0.0",
     "@emoji-mart/data": "1.2.1",
     "@emoji-mart/react": "1.1.1",
     "@fontsource/material-icons": "5.2.5",
     "@gouvfr-lasuite/integration": "1.0.3",
-    "@gouvfr-lasuite/ui-kit": "0.8.2",
+    "@gouvfr-lasuite/ui-kit": "0.11.0",
     "@hocuspocus/provider": "2.15.2",
-    "@openfun/cunningham-react": "3.1.0",
+    "@openfun/cunningham-react": "3.2.1",
     "@react-pdf/renderer": "4.3.0",
-    "@sentry/nextjs": "9.38.0",
-    "@tanstack/react-query": "5.83.0",
+    "@sentry/nextjs": "10.2.0",
+    "@tanstack/react-query": "5.84.1",
     "canvg": "4.0.3",
     "clsx": "2.1.1",
     "cmdk": "1.1.1",
@@ -45,46 +46,46 @@
     "idb": "8.0.3",
     "lodash": "4.17.21",
     "luxon": "3.7.1",
-    "next": "15.4.1",
-    "posthog-js": "1.257.0",
+    "next": "15.4.6",
+    "posthog-js": "1.258.6",
     "react": "*",
-    "react-aria-components": "1.10.1",
+    "react-aria-components": "1.11.0",
     "react-dom": "*",
-    "react-i18next": "15.6.0",
+    "react-i18next": "15.6.1",
     "react-intersection-observer": "9.16.0",
     "react-select": "5.10.2",
     "styled-components": "6.1.19",
     "use-debounce": "10.0.5",
     "y-protocols": "1.0.6",
     "yjs": "*",
-    "zustand": "5.0.6"
+    "zustand": "5.0.7"
   },
   "devDependencies": {
     "@svgr/webpack": "8.1.0",
-    "@tanstack/react-query-devtools": "5.83.0",
-    "@testing-library/dom": "10.4.0",
-    "@testing-library/jest-dom": "6.6.3",
+    "@tanstack/react-query-devtools": "5.84.1",
+    "@testing-library/dom": "10.4.1",
+    "@testing-library/jest-dom": "6.6.4",
     "@testing-library/react": "16.3.0",
     "@testing-library/user-event": "14.6.1",
     "@types/jest": "30.0.0",
     "@types/lodash": "4.17.20",
-    "@types/luxon": "3.6.2",
+    "@types/luxon": "3.7.1",
     "@types/node": "*",
     "@types/react": "*",
     "@types/react-dom": "*",
-    "cross-env": "7.0.3",
-    "dotenv": "17.2.0",
+    "cross-env": "10.0.0",
+    "dotenv": "17.2.1",
     "eslint-config-impress": "*",
     "fetch-mock": "9.11.0",
-    "jest": "30.0.4",
-    "jest-environment-jsdom": "30.0.4",
+    "jest": "30.0.5",
+    "jest-environment-jsdom": "30.0.5",
     "node-fetch": "2.7.0",
     "prettier": "3.6.2",
-    "stylelint": "16.21.1",
-    "stylelint-config-standard": "38.0.0",
+    "stylelint": "16.23.0",
+    "stylelint-config-standard": "39.0.0",
     "stylelint-prettier": "5.0.3",
     "typescript": "*",
-    "webpack": "5.100.1",
+    "webpack": "5.101.0",
     "workbox-webpack-plugin": "7.1.0"
   }
 }

src/frontend/apps/impress/src/components/Box.tsx

@@ -16,6 +16,7 @@ export interface BoxProps {
   $background?: CSSProperties['background'];
   $color?: CSSProperties['color'];
   $css?: string | RuleSet<object>;
+  $cursor?: CSSProperties['cursor'];
   $direction?: CSSProperties['flexDirection'];
   $display?: CSSProperties['display'];
   $effect?: 'show' | 'hide';
@@ -44,13 +45,13 @@ export interface BoxProps {
 export type BoxType = ComponentPropsWithRef<typeof Box>;
 
 export const Box = styled('div')<BoxProps>`
-  display: flex;
-  flex-direction: column;
   ${({ $align }) => $align && `align-items: ${$align};`}
   ${({ $background }) => $background && `background: ${$background};`}
   ${({ $color }) => $color && `color: ${$color};`}
-  ${({ $direction }) => $direction && `flex-direction: ${$direction};`}
-  ${({ $display }) => $display && `display: ${$display};`}
+  ${({ $cursor }) => $cursor && `cursor: ${$cursor};`}
+  ${({ $direction }) => `flex-direction: ${$direction || 'column'};`}
+  ${({ $display, as }) =>
+    `display: ${$display || as?.match('span|input') ? 'inline-flex' : 'flex'};`}
   ${({ $flex }) => $flex && `flex: ${$flex};`}
   ${({ $gap }) => $gap && `gap: ${$gap};`}
   ${({ $height }) => $height && `height: ${$height};`}

src/frontend/apps/impress/src/components/BoxButton.tsx

@@ -31,11 +31,11 @@ const BoxButton = forwardRef<HTMLDivElement, BoxButtonType>(
         $background="none"
         $margin="none"
         $padding="none"
+        $hasTransition
         $css={css`
           cursor: ${props.disabled ? 'not-allowed' : 'pointer'};
           border: none;
           outline: none;
-          transition: all 0.2s ease-in-out;
           font-family: inherit;
 
           color: ${props.disabled

src/frontend/apps/impress/src/components/DropButton.tsx

@@ -33,6 +33,13 @@ const StyledButton = styled(Button)<StyledButtonProps>`
   font-size: 0.938rem;
   padding: 0;
   ${({ $css }) => $css};
+
+  &:focus-visible {
+    outline: 2px solid var(--c--theme--colors--primary-500);
+    outline-offset: 2px;
+    border-radius: 4px;
+    transition: none;
+  }
 `;
 
 export interface DropButtonProps {
@@ -41,6 +48,7 @@ export interface DropButtonProps {
   isOpen?: boolean;
   onOpenChange?: (isOpen: boolean) => void;
   label?: string;
+  testId?: string;
 }
 
 export const DropButton = ({
@@ -50,6 +58,7 @@ export const DropButton = ({
   onOpenChange,
   children,
   label,
+  testId,
 }: PropsWithChildren<DropButtonProps>) => {
   const { themeTokens } = useCunninghamTheme();
   const font = themeTokens['font']?.['families']['base'];
@@ -72,6 +81,7 @@ export const DropButton = ({
         ref={triggerRef}
         onPress={() => onOpenChangeHandler(true)}
         aria-label={label}
+        data-testid={testId}
         $css={css`
           font-family: ${font};
           ${buttonCss};

src/frontend/apps/impress/src/components/dropdown-menu/DropdownMenu.tsx

@@ -1,10 +1,19 @@
 import { HorizontalSeparator } from '@gouvfr-lasuite/ui-kit';
-import { Fragment, PropsWithChildren, useRef, useState } from 'react';
+import {
+  Fragment,
+  PropsWithChildren,
+  useCallback,
+  useEffect,
+  useRef,
+  useState,
+} from 'react';
 import { css } from 'styled-components';
 
 import { Box, BoxButton, BoxProps, DropButton, Icon, Text } from '@/components';
 import { useCunninghamTheme } from '@/cunningham';
 
+import { useDropdownKeyboardNav } from './hook/useDropdownKeyboardNav';
+
 export type DropdownMenuOption = {
   icon?: string;
   label: string;
@@ -25,9 +34,11 @@ export type DropdownMenuProps = {
   arrowCss?: BoxProps['$css'];
   buttonCss?: BoxProps['$css'];
   disabled?: boolean;
+  opened?: boolean;
   topMessage?: string;
   selectedValues?: string[];
   afterOpenChange?: (isOpen: boolean) => void;
+  testId?: string;
 };
 
 export const DropdownMenu = ({
@@ -38,18 +49,48 @@ export const DropdownMenu = ({
   arrowCss,
   buttonCss,
   label,
+  opened,
   topMessage,
   afterOpenChange,
   selectedValues,
+  testId,
 }: PropsWithChildren<DropdownMenuProps>) => {
   const { spacingsTokens, colorsTokens } = useCunninghamTheme();
-  const [isOpen, setIsOpen] = useState(false);
+  const [isOpen, setIsOpen] = useState(opened ?? false);
+  const [focusedIndex, setFocusedIndex] = useState(-1);
   const blockButtonRef = useRef<HTMLDivElement>(null);
+  const menuItemRefs = useRef<(HTMLDivElement | null)[]>([]);
 
-  const onOpenChange = (isOpen: boolean) => {
-    setIsOpen(isOpen);
-    afterOpenChange?.(isOpen);
-  };
+  const onOpenChange = useCallback(
+    (isOpen: boolean) => {
+      setIsOpen(isOpen);
+      setFocusedIndex(-1);
+      afterOpenChange?.(isOpen);
+    },
+    [afterOpenChange],
+  );
+
+  useDropdownKeyboardNav({
+    isOpen,
+    focusedIndex,
+    options,
+    menuItemRefs,
+    setFocusedIndex,
+    onOpenChange,
+  });
+
+  // Focus selected menu item when menu opens
+  useEffect(() => {
+    if (isOpen && menuItemRefs.current.length > 0) {
+      const selectedIndex = options.findIndex((option) => option.isSelected);
+      if (selectedIndex !== -1) {
+        setFocusedIndex(selectedIndex);
+        setTimeout(() => {
+          menuItemRefs.current[selectedIndex]?.focus();
+        }, 0);
+      }
+    }
+  }, [isOpen, options]);
 
   if (disabled) {
     return children;
@@ -61,6 +102,7 @@ export const DropdownMenu = ({
       onOpenChange={onOpenChange}
       label={label}
       buttonCss={buttonCss}
+      testId={testId}
       button={
         showArrow ? (
           <Box
@@ -93,6 +135,7 @@ export const DropdownMenu = ({
         $maxWidth="320px"
         $minWidth={`${blockButtonRef.current?.clientWidth}px`}
         role="menu"
+        aria-label={label}
       >
         {topMessage && (
           <Text
@@ -113,14 +156,20 @@ export const DropdownMenu = ({
             return;
           }
           const isDisabled = option.disabled !== undefined && option.disabled;
+          const isFocused = index === focusedIndex;
+
           return (
             <Fragment key={option.label}>
               <BoxButton
+                ref={(el) => {
+                  menuItemRefs.current[index] = el;
+                }}
                 role="menuitem"
                 aria-label={option.label}
                 data-testid={option.testId}
                 $direction="row"
                 disabled={isDisabled}
+                $hasTransition={false}
                 onClick={(event) => {
                   event.preventDefault();
                   event.stopPropagation();
@@ -156,6 +205,19 @@ export const DropdownMenu = ({
                   &:hover {
                     background-color: var(--c--theme--colors--greyscale-050);
                   }
+
+                  &:focus-visible {
+                    outline: 2px solid var(--c--theme--colors--primary-500);
+                    outline-offset: -2px;
+                    background-color: var(--c--theme--colors--greyscale-050);
+                  }
+
+                  ${isFocused &&
+                  css`
+                    outline: 2px solid var(--c--theme--colors--primary-500);
+                    outline-offset: -2px;
+                    background-color: var(--c--theme--colors--greyscale-050);
+                  `}
                 `}
               >
                 <Box

src/frontend/apps/impress/src/components/dropdown-menu/hook/useDropdownKeyboardNav.ts

@@ -0,0 +1,88 @@
+import { RefObject, useEffect } from 'react';
+
+import { DropdownMenuOption } from '../DropdownMenu';
+
+type UseDropdownKeyboardNavProps = {
+  isOpen: boolean;
+  focusedIndex: number;
+  options: DropdownMenuOption[];
+  menuItemRefs: RefObject<(HTMLDivElement | null)[]>;
+  setFocusedIndex: (index: number) => void;
+  onOpenChange: (isOpen: boolean) => void;
+};
+
+export const useDropdownKeyboardNav = ({
+  isOpen,
+  focusedIndex,
+  options,
+  menuItemRefs,
+  setFocusedIndex,
+  onOpenChange,
+}: UseDropdownKeyboardNavProps) => {
+  useEffect(() => {
+    const handleKeyDown = (event: KeyboardEvent) => {
+      if (!isOpen) {
+        return;
+      }
+
+      const enabledIndices = options
+        .map((option, index) =>
+          option.show !== false && !option.disabled ? index : -1,
+        )
+        .filter((index) => index !== -1);
+
+      switch (event.key) {
+        case 'ArrowDown':
+          event.preventDefault();
+          const nextIndex =
+            focusedIndex < enabledIndices.length - 1 ? focusedIndex + 1 : 0;
+          const nextEnabledIndex = enabledIndices[nextIndex];
+          setFocusedIndex(nextIndex);
+          menuItemRefs.current[nextEnabledIndex]?.focus();
+          break;
+
+        case 'ArrowUp':
+          event.preventDefault();
+          const prevIndex =
+            focusedIndex > 0 ? focusedIndex - 1 : enabledIndices.length - 1;
+          const prevEnabledIndex = enabledIndices[prevIndex];
+          setFocusedIndex(prevIndex);
+          menuItemRefs.current[prevEnabledIndex]?.focus();
+          break;
+
+        case 'Enter':
+        case ' ':
+          event.preventDefault();
+          if (focusedIndex >= 0 && focusedIndex < enabledIndices.length) {
+            const selectedOptionIndex = enabledIndices[focusedIndex];
+            const selectedOption = options[selectedOptionIndex];
+            if (selectedOption && selectedOption.callback) {
+              onOpenChange(false);
+              void selectedOption.callback();
+            }
+          }
+          break;
+
+        case 'Escape':
+          event.preventDefault();
+          onOpenChange(false);
+          break;
+      }
+    };
+
+    if (isOpen) {
+      document.addEventListener('keydown', handleKeyDown);
+    }
+
+    return () => {
+      document.removeEventListener('keydown', handleKeyDown);
+    };
+  }, [
+    isOpen,
+    focusedIndex,
+    options,
+    menuItemRefs,
+    setFocusedIndex,
+    onOpenChange,
+  ]);
+};

src/frontend/apps/impress/src/components/filter/FilterDropdown.tsx

@@ -1,9 +1,12 @@
 import { css } from 'styled-components';
 
 import { Box } from '../Box';
-import { DropdownMenu, DropdownMenuOption } from '../DropdownMenu';
 import { Icon } from '../Icon';
 import { Text } from '../Text';
+import {
+  DropdownMenu,
+  DropdownMenuOption,
+} from '../dropdown-menu/DropdownMenu';
 
 export type FilterDropdownProps = {
   options: DropdownMenuOption[];

src/frontend/apps/impress/src/components/index.ts

@@ -3,7 +3,8 @@ export * from './Box';
 export * from './BoxButton';
 export * from './Card';
 export * from './DropButton';
-export * from './DropdownMenu';
+export * from './dropdown-menu/DropdownMenu';
+export * from './quick-search';
 export * from './Icon';
 export * from './InfiniteScroll';
 export * from './Link';

src/frontend/apps/impress/src/components/quick-search/QuickSearch.tsx

@@ -1,5 +1,11 @@
 import { Command } from 'cmdk';
-import { ReactNode, useRef } from 'react';
+import {
+  PropsWithChildren,
+  ReactNode,
+  useEffect,
+  useRef,
+  useState,
+} from 'react';
 
 import { hasChildrens } from '@/utils/children';
 
@@ -30,7 +36,6 @@ export type QuickSearchProps = {
   loading?: boolean;
   label?: string;
   placeholder?: string;
-  children?: ReactNode;
 };
 
 export const QuickSearch = ({
@@ -42,14 +47,47 @@ export const QuickSearch = ({
   label,
   placeholder,
   children,
-}: QuickSearchProps) => {
+}: PropsWithChildren<QuickSearchProps>) => {
   const ref = useRef<HTMLDivElement | null>(null);
+  const [selectedValue, setSelectedValue] = useState<string>('');
+
+  // Auto-select first item when children change
+  useEffect(() => {
+    if (!children) {
+      setSelectedValue('');
+      return;
+    }
+
+    // Small delay for DOM to update
+    const timeoutId = setTimeout(() => {
+      const firstItem = ref.current?.querySelector('[cmdk-item]');
+      if (firstItem) {
+        const value =
+          firstItem.getAttribute('data-value') ||
+          firstItem.getAttribute('value') ||
+          firstItem.textContent?.trim() ||
+          '';
+        if (value) {
+          setSelectedValue(value);
+        }
+      }
+    }, 50);
+
+    return () => clearTimeout(timeoutId);
+  }, [children]);
 
   return (
     <>
       <QuickSearchStyle />
       <div className="quick-search-container">
-        <Command label={label} shouldFilter={false} ref={ref}>
+        <Command
+          label={label}
+          shouldFilter={false}
+          ref={ref}
+          value={selectedValue}
+          onValueChange={setSelectedValue}
+          tabIndex={0}
+        >
           {showInput && (
             <QuickSearchInput
               loading={loading}

src/frontend/apps/impress/src/components/quick-search/QuickSearchGroup.tsx

@@ -1,7 +1,7 @@
 import { Command } from 'cmdk';
 import { ReactNode } from 'react';
 
-import { Box } from '../Box';
+import { Box, Text } from '@/components';
 
 import { QuickSearchData } from './QuickSearch';
 import { QuickSearchItem } from './QuickSearchItem';
@@ -23,6 +23,7 @@ export const QuickSearchGroup = <T,>({
         key={group.groupName}
         heading={group.groupName}
         forceMount={false}
+        contentEditable={false}
       >
         {group.startActions?.map((action, index) => {
           return (
@@ -58,7 +59,13 @@ export const QuickSearchGroup = <T,>({
           );
         })}
         {group.emptyString && group.elements.length === 0 && (
-          <span className="ml-b clr-greyscale-500">{group.emptyString}</span>
+          <Text
+            $variation="500"
+            $margin={{ left: '2xs', bottom: '3xs' }}
+            $size="sm"
+          >
+            {group.emptyString}
+          </Text>
         )}
       </Command.Group>
     </Box>