📝(documentation) Add custom export templates section

... with usage instructions and limitations

Signed-off-by: rvveber <weber@b1-systems.de>

.github/workflows/docker-hub.yml

@@ -31,8 +31,11 @@ jobs:
           images: lasuite/impress-backend
       -
         name: Login to DockerHub
-        if: github.event_name != 'pull_request'
-        run: echo "${{ secrets.DOCKER_HUB_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_HUB_USER }}" --password-stdin
+        if: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview')
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_HUB_USER }}
+          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
       -
         name: Run trivy scan
         uses: numerique-gouv/action-trivy-cache@main
@@ -46,7 +49,7 @@ jobs:
           context: .
           target: backend-production
           build-args: DOCKER_USER=${{ env.DOCKER_USER }}:-1000
-          push: ${{ github.event_name != 'pull_request' }}
+          push: ${{ github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview') }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 
@@ -64,8 +67,11 @@ jobs:
           images: lasuite/impress-frontend
       -
         name: Login to DockerHub
-        if: github.event_name != 'pull_request'
-        run: echo "${{ secrets.DOCKER_HUB_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_HUB_USER }}" --password-stdin
+        if: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview')
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKER_HUB_USER }}
+          password: ${{ secrets.DOCKER_HUB_PASSWORD }}
       -
         name: Run trivy scan
         uses: numerique-gouv/action-trivy-cache@main
@@ -82,7 +88,7 @@ jobs:
           build-args: |
             DOCKER_USER=${{ env.DOCKER_USER }}:-1000
             PUBLISH_AS_MIT=false
-          push: ${{ github.event_name != 'pull_request' }}
+          push: ${{ github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview') }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 
@@ -100,7 +106,7 @@ jobs:
           images: lasuite/impress-y-provider
       -
         name: Login to DockerHub
-        if: github.event_name != 'pull_request'
+        if: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview')
         run: echo "${{ secrets.DOCKER_HUB_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_HUB_USER }}" --password-stdin
       -
         name: Run trivy scan
@@ -116,7 +122,7 @@ jobs:
           file: ./src/frontend/servers/y-provider/Dockerfile
           target: y-provider
           build-args: DOCKER_USER=${{ env.DOCKER_USER }}:-1000
-          push: ${{ github.event_name != 'pull_request' }}
+          push: ${{ github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview') }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
 
@@ -125,7 +131,7 @@ jobs:
       - build-and-push-frontend
       - build-and-push-backend
     runs-on: ubuntu-latest
-    if: github.event_name != 'pull_request'
+    if: github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'preview')
     steps:
       - uses: numerique-gouv/action-argocd-webhook-notification@main
         id: notify

.github/workflows/impress.yml

@@ -79,6 +79,7 @@ jobs:
             --check-filenames \
             --ignore-words-list "Dokument,afterAll,excpt,statics" \
             --skip "./git/" \
+            --skip "**/*.pdf" \
             --skip "**/*.po" \
             --skip "**/*.pot" \
             --skip "**/*.json" \

.github/workflows/label_preview.yml

@@ -0,0 +1,27 @@
+name: Label Preview
+
+on:
+  pull_request:
+    types: [labeled, opened]
+
+permissions: 
+  pull-requests: write
+
+jobs:
+  comment:
+    runs-on: ubuntu-latest
+    if: contains(github.event.pull_request.labels.*.name, 'preview')
+    steps:
+      - uses: thollander/actions-comment-pull-request@v3
+        with:
+          message: |
+            :rocket: Preview will be available at [https://${{ github.event.pull_request.number }}-docs.ppr-docs.beta.numerique.gouv.fr/](https://${{ github.event.pull_request.number }}-docs.ppr-docs.beta.numerique.gouv.fr/)
+
+            You can use the existing account with these credentials:
+            - username: `docs`
+            - password: `docs`
+
+            You can also create a new account if you want to.
+
+            Once this Pull Request is merged, the preview will be destroyed.
+          comment-tag: preview-url

.gitignore

@@ -75,3 +75,6 @@ db.sqlite3
 .vscode/
 *.iml
 .devcontainer
+
+# Cursor rules
+.cursorrules

CHANGELOG.md

@@ -1,5 +1,3 @@
-# Changelog
-
 All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0),
@@ -8,6 +6,129 @@ and this project adheres to
 
 ## [Unreleased]
 
+### Added
+
+- ✨(frontend) create skeleton component for DocEditor #1491
+- ✨(frontend) add an EmojiPicker in the document tree and title #1381
+
+### Changed
+
+- ♻️(frontend) adapt custom blocks to new implementation #1375
+- ♻️(backend) increase user short_name field length
+
+### Fixed
+
+- 🐛(frontend) fix duplicate document entries in grid #1479
+- 🐛(frontend) show full nested doc names with ajustable bar #1456
+- 🐛(backend) fix trashbin list
+- ♿(frontend) improve accessibility:
+  - ♿(frontend) remove empty alt on logo due to Axe a11y error #1516
+
+## [3.8.2] - 2025-10-17
+
+### Fixed
+
+- 🐛(service-worker) fix sw registration and page reload logic #1500
+
+## [3.8.1] - 2025-10-17
+
+### Fixed
+
+- ⚡️(backend) improve trashbin endpoint performance #1495
+- 🐛(backend) manage invitation partial update without email #1494
+- ♿(frontend) improve accessibility:
+  - ♿ add missing aria-label to add sub-doc button for accessibility #1480
+  - ♿ add missing aria-label to more options button on sub-docs #1481
+
+### Removed
+
+- 🔥(backend) remove treebeard form for the document admin #1470
+
+## [3.8.0] - 2025-10-14
+
+### Added
+
+- ✨(frontend) add pdf block to the editor #1293
+- ✨List and restore deleted docs #1450
+
+### Changed
+
+- ♻️(frontend) Refactor Auth component for improved redirection logic #1461
+- ♻️(frontend) replace Arial font-family with token font #1411
+- ♿(frontend) improve accessibility:
+  - ♿(frontend) enable enter key to open documentss #1354
+  - ♿(frontend) improve modal a11y: structure, labels, title #1349
+  - ♿improve NVDA navigation in DocShareModal #1396
+  - ♿ improve accessibility by adding landmark roles to layout #1394
+  - ♿ add document visible in list and openable via enter key #1365
+  - ♿ add pdf outline property to enable bookmarks display #1368
+  - ♿ hide decorative icons from assistive tech with aria-hidden #1404
+  - ♿ fix rgaa 1.9.1: convert to figure/figcaption structure #1426
+  - ♿ remove redundant aria-label to avoid over-accessibility #1420
+  - ♿ remove redundant aria-label on hidden icons and update tests #1432
+  - ♿ improve semantic structure and aria roles of leftpanel #1431
+  - ♿ add default background to left panel for better accessibility #1423
+  - ♿ restyle checked checkboxes: removing strikethrough #1439
+  - ♿ add h1 for SR on 40X pages and remove alt texts #1438
+  - ♿ update labels and shared document icon accessibility #1442
+- 🍱(frontend) Fonts GDPR compliants #1453
+- ♻️(service-worker) improve SW registration and update handling #1473
+
+### Fixed
+
+- 🐛(backend) duplicate sub docs as root for reader users #1385
+- ⚗️(service-worker) remove index from cache first strategy #1395
+- 🐛(frontend) fix 404 page when reload 403 page #1402
+- 🐛(frontend) fix legacy role computation #1376
+- 🛂(frontend) block editing title when not allowed #1412
+- 🐛(frontend) scroll back to top when navigate to a document #1406
+- 🐛(frontend) fix export pdf emoji problem #1453
+- 🐛(frontend) fix attachment download filename #1447
+- 🐛(frontend) exclude h4-h6 headings from table of contents #1441
+- 🔒(frontend) prevent readers from changing callout emoji #1449
+- 🐛(frontend) fix overlapping placeholders in multi-column layout #1455
+- 🐛(backend) filter invitation with case insensitive email #1457
+- 🐛(frontend) reduce no access image size from 450 to 300 #1463
+- 🐛(frontend) preserve interlink style on drag-and-drop in editor #1460
+- ✨(frontend) load docs logo from public folder via url #1462
+- 🔧(keycloak) Fix https required issue in dev mode #1286
+
+## Removed
+
+- 🔥(frontend) remove custom DividerBlock ##1375
+
+## [3.7.0] - 2025-09-12
+
+### Added
+
+- ✨(api) add API route to fetch document content #1206
+- ✨(frontend) doc emojis improvements #1381
+  - add an EmojiPicker in the document tree and document title
+  - remove emoji buttons in menus
+
+### Changed
+
+- 🔒️(backend) configure throttle on every viewsets #1343
+- ⬆️ Bump eslint to V9 #1071
+- ♿(frontend) improve accessibility:
+  - ♿fix major accessibility issues reported by wave and axe #1344
+  - ✨unify tab focus style for better visual consistency #1341
+  - ✨improve modal a11y: structure, labels, and title #1349
+  - ✨improve accessibility of cdoc content with correct aria tags #1271
+  - ✨unify tab focus style for better visual consistency #1341
+  - ♿hide decorative icons, label menus, avoid accessible name… #1362
+- ♻️(tilt) use helm dev-backend chart
+- 🩹(frontend) on main pages do not display leading emoji as page icon #1381
+- 🩹(frontend) handle properly emojis in interlinking #1381
+
+### Removed
+
+- 🔥(frontend) remove multi column drop cursor #1370
+
+### Fixed
+
+- 🐛(frontend) fix callout emoji list #1366
+
 ## [3.6.0] - 2025-09-04
 
 ### Added
@@ -27,8 +148,10 @@ and this project adheres to
   - ♿️(frontend) keyboard interaction with menu #1244
   - ♿(frontend) improve header accessibility #1270
   - ♿(frontend) improve accessibility for decorative images in editor #1282
+  - #1338
+  - #1281
 - ♻️(backend) fallback to email identifier when no name #1298
-- 🐛(backend) allow ASCII characters in user sub field #1295 
+- 🐛(backend) allow ASCII characters in user sub field #1295
 - ⚡️(frontend) improve fallback width calculation #1333
 
 ### Fixed
@@ -712,7 +835,11 @@ and this project adheres to
 - ✨(frontend) Coming Soon page (#67)
 - 🚀 Impress, project to manage your documents easily and collaboratively.
 
-[unreleased]: https://github.com/suitenumerique/docs/compare/v3.6.0...main
+[unreleased]: https://github.com/suitenumerique/docs/compare/v3.8.2...main
+[v3.8.2]: https://github.com/suitenumerique/docs/releases/v3.8.2
+[v3.8.1]: https://github.com/suitenumerique/docs/releases/v3.8.1
+[v3.8.0]: https://github.com/suitenumerique/docs/releases/v3.8.0
+[v3.7.0]: https://github.com/suitenumerique/docs/releases/v3.7.0
 [v3.6.0]: https://github.com/suitenumerique/docs/releases/v3.6.0
 [v3.5.0]: https://github.com/suitenumerique/docs/releases/v3.5.0
 [v3.4.2]: https://github.com/suitenumerique/docs/releases/v3.4.2

Dockerfile

@@ -94,6 +94,14 @@ RUN chmod g=u /etc/passwd
 # Copy installed python dependencies
 COPY --from=back-builder /install /usr/local
 
+# Link certifi certificate from a static path /cert/cacert.pem to avoid issues
+# when python is upgraded and the path to the certificate changes.
+# The space between print and the ( is intended otherwise the git lint is failing
+RUN mkdir /cert && \
+    path=`python -c 'import certifi;print (certifi.where())'` && \
+    mv $path /cert/ && \
+    ln -s /cert/cacert.pem $path
+
 # Copy impress application (see .dockerignore)
 COPY ./src/backend /app/
 

Makefile

@@ -440,6 +440,6 @@ bump-packages-version: ## bump the version of the project - VERSION_TYPE can be
 	cd ./src/frontend/apps/e2e/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
 	cd ./src/frontend/apps/impress/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
 	cd ./src/frontend/servers/y-provider/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
-	cd ./src/frontend/packages/eslint-config-impress/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
+	cd ./src/frontend/packages/eslint-plugin-docs/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
 	cd ./src/frontend/packages/i18n/ && yarn version --no-git-tag-version --$(VERSION_TYPE)
 .PHONY: bump-packages-version

README.md

@@ -54,16 +54,16 @@ Docs is a collaborative text editor designed to address common challenges in kno
 We use Kubernetes for our [production instance](https://docs.numerique.gouv.fr/) but also support Docker Compose. The community contributed a couple other methods (Nix, YunoHost etc.) check out the [docs](/docs/installation/README.md) to get detailed instructions and examples.
 
 #### 🌍 Known instances
-We hope to see many more, here is an incomplete list of public Docs instances (urls listed in alphabetical order). Feel free to make a PR to add ones that are not listed below🙏
- 
-|     |     |         |
-| --- | --- | ------- |
+We hope to see many more, here is an incomplete list of public Docs instances. Feel free to make a PR to add ones that are not listed below🙏
+
 | Url | Org | Public |
-| docs.numerique.gouv.fr    | DINUM    | French public agents working for the central administration and the extended public sphere. ProConnect is required to login in or sign up|
-| docs.suite.anct.gouv.fr    | ANCT    | French public agents working for the territorial administration and the extended public sphere. ProConnect is required to login in or sign up|
-| notes.demo.opendesk.eu    | ZenDiS    | Demo instance of OpenDesk. Request access to get credentials |
-| notes.liiib.re    | lasuite.coop    | Free and open demo to all. Content and accounts are reset after one month |
-| docs.federated.nexus    | federated.nexus    | Public instance, but you have to [sign up for a Federated Nexus account](https://federated.nexus/register/). |
+| --- | --- | ------- |
+| [docs.numerique.gouv.fr](https://docs.numerique.gouv.fr/)    | DINUM    | French public agents working for the central administration and the extended public sphere. ProConnect is required to login in or sign up|
+| [docs.suite.anct.gouv.fr](https://docs.suite.anct.gouv.fr/)    | ANCT    | French public agents working for the territorial administration and the extended public sphere. ProConnect is required to login in or sign up|
+| [notes.demo.opendesk.eu](https://notes.demo.opendesk.eu)    | ZenDiS    | Demo instance of OpenDesk. Request access to get credentials |
+| [notes.liiib.re](https://notes.liiib.re/)    | lasuite.coop    | Free and open demo to all. Content and accounts are reset after one month |
+| [docs.federated.nexus](https://docs.federated.nexus/)    | federated.nexus    | Public instance, but you have to [sign up for a Federated Nexus account](https://federated.nexus/register/). |
+| [docs.demo.mosacloud.eu](https://docs.demo.mosacloud.eu/)    | mosa.cloud    | Demo instance of mosa.cloud, a dutch company providing services around La Suite apps. |
 
 #### ⚠️ Advanced features
 For some advanced features (ex: Export as PDF) Docs relies on XL packages from BlockNote. These are licenced under GPL and are not MIT compatible. You can perfectly use Docs without these packages by setting the environment variable `PUBLISH_AS_MIT` to true. That way you'll build an image of the application without the features that are not MIT compatible. Read the [environment variables documentation](/docs/env.md) for more information.

bin/Tiltfile

@@ -39,9 +39,10 @@ docker_build(
     ]
 )
 
-k8s_resource('impress-docs-backend-migrate', resource_deps=['postgres-postgresql'])
+k8s_resource('impress-docs-backend-migrate', resource_deps=['dev-backend-postgres'])
 k8s_resource('impress-docs-backend-createsuperuser', resource_deps=['impress-docs-backend-migrate'])
-k8s_resource('impress-docs-backend', resource_deps=['impress-docs-backend-migrate'])
+k8s_resource('dev-backend-keycloak', resource_deps=['dev-backend-keycloak-pg'])
+k8s_resource('impress-docs-backend', resource_deps=['impress-docs-backend-migrate', 'dev-backend-redis', 'dev-backend-keycloak', 'dev-backend-postgres', 'dev-backend-minio:statefulset'])
 k8s_yaml(local('cd ../src/helm && helmfile -n impress -e dev template .'))
 
 migration = '''

compose.yml

@@ -184,22 +184,20 @@ services:
       - env.d/development/kc_postgresql.local
 
   keycloak:
-    image: quay.io/keycloak/keycloak:20.0.1
+    image: quay.io/keycloak/keycloak:26.3
     volumes:
       - ./docker/auth/realm.json:/opt/keycloak/data/import/realm.json
     command:
       - start-dev
       - --features=preview
       - --import-realm
-      - --proxy=edge
-      - --hostname-url=http://localhost:8083
-      - --hostname-admin-url=http://localhost:8083/
+      - --hostname=http://localhost:8083
       - --hostname-strict=false
-      - --hostname-strict-https=false
       - --health-enabled=true
       - --metrics-enabled=true
     healthcheck:
-      test: ["CMD", "curl", "--head", "-fsS", "http://localhost:8080/health/ready"]
+      test: ['CMD-SHELL', 'exec 3<>/dev/tcp/localhost/9000; echo -e "GET /health/live HTTP/1.1\r\nHost: localhost\r\nConnection: close\r\n\r\n" >&3; grep "HTTP/1.1 200 OK" <&3']
+      start_period: 5s
       interval: 1s
       timeout: 2s
       retries: 300

docker/auth/realm.json

@@ -26,7 +26,7 @@
   "oauth2DeviceCodeLifespan": 600,
   "oauth2DevicePollingInterval": 5,
   "enabled": true,
-  "sslRequired": "external",
+  "sslRequired": "none",
   "registrationAllowed": true,
   "registrationEmailAsUsername": false,
   "rememberMe": true,
@@ -60,7 +60,7 @@
     },
     {
       "username": "user-e2e-chromium",
-      "email": "user@chromium.test",
+      "email": "user.test@chromium.test",
       "firstName": "E2E",
       "lastName": "Chromium",
       "enabled": true,
@@ -74,7 +74,7 @@
     },
     {
       "username": "user-e2e-webkit",
-      "email": "user@webkit.test",
+      "email": "user.test@webkit.test",
       "firstName": "E2E",
       "lastName": "Webkit",
       "enabled": true,
@@ -88,7 +88,7 @@
     },
     {
       "username": "user-e2e-firefox",
-      "email": "user@firefox.test",
+      "email": "user.test@firefox.test",
       "firstName": "E2E",
       "lastName": "Firefox",
       "enabled": true,
@@ -2270,7 +2270,7 @@
     "cibaInterval": "5",
     "realmReusableOtpCode": "false"
   },
-  "keycloakVersion": "20.0.1",
+  "keycloakVersion": "26.3.2",
   "userManagedAccessAllowed": false,
   "clientProfiles": {
     "profiles": []

docs/examples/helm/impress.values.yaml

@@ -82,7 +82,7 @@ backend:
   # Extra volume to manage our local custom CA and avoid to set ssl_verify: false
   extraVolumeMounts:
     - name: certs
-      mountPath: /usr/local/lib/python3.13/site-packages/certifi/cacert.pem
+      mountPath: /cert/cacert.pem
       subPath: cacert.pem
 
   # Extra volume to manage our local custom CA and avoid to set ssl_verify: false

docs/theming.md

@@ -32,6 +32,24 @@ Then, set the `FRONTEND_CSS_URL` environment variable to the URL of your custom
 
 ----
 
+# **Your logo** 📝
+
+You can add your own logo in the header from the theme customization file.
+
+### Settings 🔧
+
+```shellscript
+THEME_CUSTOMIZATION_FILE_PATH=<path>
+```
+
+### Example of JSON
+
+You can activate it with the `header.logo` configuration: https://github.com/suitenumerique/docs/blob/main/src/helm/env.d/dev/configuration/theme/demo.json
+
+This configuration is optional. If not set, the default logo will be used.
+
+----
+
 # **Footer Configuration** 📝
 
 The footer is configurable from the theme customization file.
@@ -67,4 +85,44 @@ THEME_CUSTOMIZATION_FILE_PATH=<path>
 
 ### Example of JSON
 
-The json must follow some rules: https://github.com/suitenumerique/docs/blob/main/src/helm/env.d/dev/configuration/theme/demo.json
+The json must follow some rules: https://github.com/suitenumerique/docs/blob/main/src/helm/env.d/dev/configuration/theme/demo.json
+
+----
+
+# **Custom Export Templates** 📄
+
+You can define custom export templates to add introductory content, such as headers or titles, to documents before exporting them as PDF, Docx, etc...
+
+Export Templates are managed through the admin interface and can be selected by users during the export process.
+
+### Benefits
+
+This feature offers several advantages:
+*   **Header customization** 📄: Add custom headers, titles, or branding to exported documents.
+*   **No code changes required** 🔧: Templates are managed through the admin interface without needing developer intervention.
+*   **Flexible content** 🌟: Use HTML to create headers that match your organization's style.
+
+### Limitations ⚠️
+
+- Currently, templates are only prepended to the document.
+More complex layouts are not supported at this time.
+- The `CSS` and `Description` fields are being ignored at this time.
+- <b>Due to technical conversion limitations, not all HTML can be converted to the internal format!</b>
+
+### How to Use
+
+1. Create the Template in a new document.
+![Build Template in Editor](./assets/export-template-tutorial/build-template-in-editor.png)
+2. Copy it as HTML code using the `Copy as HTML` feature:
+   ![Three Dots Copy as HTML](./assets/export-template-tutorial/three-dots-copy-as-html.png)
+3. Log in to the admin interface at `/admin` (backend container).
+2. Create a new template:
+   ![Admin Create Template Workflow](./assets/export-template-tutorial/admin-create-template-workflow.png)
+    - **Title**: Enter a descriptive name for the template.
+    - **Code**: Paste the HTML content from step 2.
+    - **Public**: Check this box to make the template available in the frontend export modal.
+    - **Save** the template.
+
+Once saved, users can select the template from the export modal in the frontend during the export process.
+![Select Template in Editor](./assets/export-template-tutorial/select-template-in-editor.png)
+

env.d/development/common

@@ -66,3 +66,6 @@ COLLABORATION_WS_URL=ws://localhost:4444/collaboration/ws/
 DJANGO_SERVER_TO_SERVER_API_TOKENS=server-api-token
 Y_PROVIDER_API_BASE_URL=http://y-provider-development:4444/api/
 Y_PROVIDER_API_KEY=yprovider-api-key
+
+# Theme customization
+THEME_CUSTOMIZATION_CACHE_TIMEOUT=15

env.d/development/common.e2e

@@ -3,3 +3,7 @@ BURST_THROTTLE_RATES="200/minute"
 COLLABORATION_API_URL=http://y-provider:4444/collaboration/api/
 SUSTAINED_THROTTLE_RATES="200/hour"
 Y_PROVIDER_API_BASE_URL=http://y-provider:4444/api/
+
+# Throttle
+API_DOCUMENT_THROTTLE_RATE=1000/min
+API_CONFIG_THROTTLE_RATE=1000/min

renovate.json

@@ -24,10 +24,7 @@
       "groupName": "ignored js dependencies",
       "matchManagers": ["npm"],
       "matchPackageNames": [
-        "@hocuspocus/provider",
-        "@hocuspocus/server",
         "docx",
-        "eslint",
         "fetch-mock",
         "node",
         "node-fetch",

src/backend/core/admin.py

@@ -5,7 +5,6 @@ from django.contrib.auth import admin as auth_admin
 from django.utils.translation import gettext_lazy as _
 
 from treebeard.admin import TreeAdmin
-from treebeard.forms import movenodeform_factory
 
 from . import models
 
@@ -157,7 +156,6 @@ class DocumentAdmin(TreeAdmin):
             },
         ),
     )
-    form = movenodeform_factory(models.Document)
     inlines = (DocumentAccessInline,)
     list_display = (
         "id",

src/backend/core/api/filters.py

@@ -128,3 +128,11 @@ class ListDocumentFilter(DocumentFilter):
 
         queryset_method = queryset.filter if bool(value) else queryset.exclude
         return queryset_method(link_traces__user=user, link_traces__is_masked=True)
+
+
+class UserSearchFilter(django_filters.FilterSet):
+    """
+    Custom filter for searching users.
+    """
+
+    q = django_filters.CharFilter(min_length=5, max_length=254)

src/backend/core/api/serializers.py

@@ -90,6 +90,7 @@ class ListDocumentSerializer(serializers.ModelSerializer):
     nb_accesses_direct = serializers.IntegerField(read_only=True)
     user_role = serializers.SerializerMethodField(read_only=True)
     abilities = serializers.SerializerMethodField(read_only=True)
+    deleted_at = serializers.SerializerMethodField(read_only=True)
 
     class Meta:
         model = models.Document
@@ -102,6 +103,7 @@ class ListDocumentSerializer(serializers.ModelSerializer):
             "computed_link_role",
             "created_at",
             "creator",
+            "deleted_at",
             "depth",
             "excerpt",
             "is_favorite",
@@ -124,6 +126,7 @@ class ListDocumentSerializer(serializers.ModelSerializer):
             "computed_link_role",
             "created_at",
             "creator",
+            "deleted_at",
             "depth",
             "excerpt",
             "is_favorite",
@@ -165,6 +168,10 @@ class ListDocumentSerializer(serializers.ModelSerializer):
         request = self.context.get("request")
         return instance.get_role(request.user) if request else None
 
+    def get_deleted_at(self, instance):
+        """Return the deleted_at of the current document."""
+        return instance.ancestors_deleted_at
+
 
 class DocumentLightSerializer(serializers.ModelSerializer):
     """Minial document serializer for nesting in document accesses."""
@@ -193,6 +200,7 @@ class DocumentSerializer(ListDocumentSerializer):
             "content",
             "created_at",
             "creator",
+            "deleted_at",
             "depth",
             "excerpt",
             "is_favorite",
@@ -216,6 +224,7 @@ class DocumentSerializer(ListDocumentSerializer):
             "computed_link_role",
             "created_at",
             "creator",
+            "deleted_at",
             "depth",
             "is_favorite",
             "link_role",
@@ -506,6 +515,10 @@ class LinkDocumentSerializer(serializers.ModelSerializer):
     We expose it separately from document in order to simplify and secure access control.
     """
 
+    link_reach = serializers.ChoiceField(
+        choices=models.LinkReachChoices.choices, required=True
+    )
+
     class Meta:
         model = models.Document
         fields = [
@@ -513,6 +526,58 @@ class LinkDocumentSerializer(serializers.ModelSerializer):
             "link_reach",
         ]
 
+    def validate(self, attrs):
+        """Validate that link_role and link_reach are compatible using get_select_options."""
+        link_reach = attrs.get("link_reach")
+        link_role = attrs.get("link_role")
+
+        if not link_reach:
+            raise serializers.ValidationError(
+                {"link_reach": _("This field is required.")}
+            )
+
+        # Get available options based on ancestors' link definition
+        available_options = models.LinkReachChoices.get_select_options(
+            **self.instance.ancestors_link_definition
+        )
+
+        # Validate link_reach is allowed
+        if link_reach not in available_options:
+            msg = _(
+                "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+            )
+            raise serializers.ValidationError(
+                {"link_reach": msg % {"link_reach": link_reach}}
+            )
+
+        # Validate link_role is compatible with link_reach
+        allowed_roles = available_options[link_reach]
+
+        # Restricted reach: link_role must be None
+        if link_reach == models.LinkReachChoices.RESTRICTED:
+            if link_role is not None:
+                raise serializers.ValidationError(
+                    {
+                        "link_role": (
+                            "Cannot set link_role when link_reach is 'restricted'. "
+                            "Link role must be null for restricted reach."
+                        )
+                    }
+                )
+            return attrs
+        # Non-restricted: link_role must be in allowed roles
+        if link_role not in allowed_roles:
+            allowed_roles_str = ", ".join(allowed_roles) if allowed_roles else "none"
+            raise serializers.ValidationError(
+                {
+                    "link_role": (
+                        f"Link role '{link_role}' is not allowed for link reach '{link_reach}'. "
+                        f"Allowed roles: {allowed_roles_str}"
+                    )
+                }
+            )
+        return attrs
+
 
 class DocumentDuplicationSerializer(serializers.Serializer):
     """
@@ -684,6 +749,9 @@ class InvitationSerializer(serializers.ModelSerializer):
         if self.instance is None:
             attrs["issuer"] = user
 
+        if attrs.get("email"):
+            attrs["email"] = attrs["email"].lower()
+
         return attrs
 
     def validate_role(self, role):

src/backend/core/api/throttling.py

@@ -0,0 +1,21 @@
+"""Throttling modules for the API."""
+
+from rest_framework.throttling import UserRateThrottle
+from sentry_sdk import capture_message
+
+
+def sentry_monitoring_throttle_failure(message):
+    """Log when a failure occurs to detect rate limiting issues."""
+    capture_message(message, "warning")
+
+
+class UserListThrottleBurst(UserRateThrottle):
+    """Throttle for the user list endpoint."""
+
+    scope = "user_list_burst"
+
+
+class UserListThrottleSustained(UserRateThrottle):
+    """Throttle for the user list endpoint."""
+
+    scope = "user_list_sustained"

src/backend/core/api/viewsets.py

@@ -1,6 +1,7 @@
 """API endpoints"""
 # pylint: disable=too-many-lines
 
+import base64
 import json
 import logging
 import uuid
@@ -33,16 +34,25 @@ from lasuite.malware_detection import malware_detection
 from rest_framework import filters, status, viewsets
 from rest_framework import response as drf_response
 from rest_framework.permissions import AllowAny
-from rest_framework.throttling import UserRateThrottle
 
 from core import authentication, choices, enums, models
 from core.services.ai_services import AIService
 from core.services.collaboration_services import CollaborationService
+from core.services.converter_services import (
+    ServiceUnavailableError as YProviderServiceUnavailableError,
+)
+from core.services.converter_services import (
+    ValidationError as YProviderValidationError,
+)
+from core.services.converter_services import (
+    YdocConverter,
+)
 from core.tasks.mail import send_ask_for_access_mail
 from core.utils import extract_attachments, filter_descendants
 
 from . import permissions, serializers, utils
-from .filters import DocumentFilter, ListDocumentFilter
+from .filters import DocumentFilter, ListDocumentFilter, UserSearchFilter
+from .throttling import UserListThrottleBurst, UserListThrottleSustained
 
 logger = logging.getLogger(__name__)
 
@@ -136,18 +146,6 @@ class Pagination(drf.pagination.PageNumberPagination):
     page_size_query_param = "page_size"
 
 
-class UserListThrottleBurst(UserRateThrottle):
-    """Throttle for the user list endpoint."""
-
-    scope = "user_list_burst"
-
-
-class UserListThrottleSustained(UserRateThrottle):
-    """Throttle for the user list endpoint."""
-
-    scope = "user_list_sustained"
-
-
 class UserViewSet(
     drf.mixins.UpdateModelMixin, viewsets.GenericViewSet, drf.mixins.ListModelMixin
 ):
@@ -178,12 +176,18 @@ class UserViewSet(
         if self.action != "list":
             return queryset
 
+        filterset = UserSearchFilter(
+            self.request.GET, queryset=queryset, request=self.request
+        )
+        if not filterset.is_valid():
+            raise drf.exceptions.ValidationError(filterset.errors)
+
         # Exclude all users already in the given document
         if document_id := self.request.query_params.get("document_id", ""):
             queryset = queryset.exclude(documentaccess__document_id=document_id)
 
-        if not (query := self.request.query_params.get("q", "")) or len(query) < 5:
-            return queryset.none()
+        filter_data = filterset.form.cleaned_data
+        query = filter_data["q"]
 
         # For emails, match emails by Levenstein distance to prevent typing errors
         if "@" in query:
@@ -360,6 +364,7 @@ class DocumentViewSet(
     permission_classes = [
         permissions.DocumentPermission,
     ]
+    throttle_scope = "document"
     queryset = models.Document.objects.select_related("creator").all()
     serializer_class = serializers.DocumentSerializer
     ai_translate_serializer_class = serializers.AITranslateSerializer
@@ -618,12 +623,32 @@ class DocumentViewSet(
         The selected documents are those deleted within the cutoff period defined in the
         settings (see TRASHBIN_CUTOFF_DAYS), before they are considered permanently deleted.
         """
+
+        if not request.user.is_authenticated:
+            return self.get_response_for_queryset(self.queryset.none())
+
+        access_documents_paths = (
+            models.DocumentAccess.objects.select_related("document")
+            .filter(
+                db.Q(user=self.request.user) | db.Q(team__in=self.request.user.teams),
+                role=models.RoleChoices.OWNER,
+            )
+            .values_list("document__path", flat=True)
+        )
+
+        if not access_documents_paths:
+            return self.get_response_for_queryset(self.queryset.none())
+
+        children_clause = db.Q()
+        for path in access_documents_paths:
+            children_clause |= db.Q(path__startswith=path)
+
         queryset = self.queryset.filter(
+            children_clause,
             deleted_at__isnull=False,
             deleted_at__gte=models.get_trashbin_cutoff(),
         )
         queryset = queryset.annotate_user_roles(self.request.user)
-        queryset = queryset.filter(user_roles__contains=[models.RoleChoices.OWNER])
 
         return self.get_response_for_queryset(queryset)
 
@@ -846,33 +871,47 @@ class DocumentViewSet(
 
         try:
             current_document = (
-                self.queryset.select_related(None).only("depth", "path").get(pk=pk)
+                self.queryset.select_related(None)
+                .only("depth", "path", "ancestors_deleted_at")
+                .get(pk=pk)
             )
         except models.Document.DoesNotExist as excpt:
             raise drf.exceptions.NotFound() from excpt
 
-        ancestors = (
-            (
-                current_document.get_ancestors()
-                | self.queryset.select_related(None).filter(pk=pk)
-            )
-            .filter(ancestors_deleted_at__isnull=True)
-            .order_by("path")
-        )
+        is_deleted = current_document.ancestors_deleted_at is not None
 
-        # Get the highest readable ancestor
-        highest_readable = (
-            ancestors.select_related(None)
-            .readable_per_se(request.user)
-            .only("depth", "path")
-            .first()
-        )
-        if highest_readable is None:
-            raise (
-                drf.exceptions.PermissionDenied()
-                if request.user.is_authenticated
-                else drf.exceptions.NotAuthenticated()
+        if is_deleted:
+            if current_document.get_role(user) != models.RoleChoices.OWNER:
+                raise (
+                    drf.exceptions.PermissionDenied()
+                    if request.user.is_authenticated
+                    else drf.exceptions.NotAuthenticated()
+                )
+            highest_readable = current_document
+            ancestors = self.queryset.select_related(None).filter(pk=pk)
+        else:
+            ancestors = (
+                (
+                    current_document.get_ancestors()
+                    | self.queryset.select_related(None).filter(pk=pk)
+                )
+                .filter(ancestors_deleted_at__isnull=True)
+                .order_by("path")
             )
+            # Get the highest readable ancestor
+            highest_readable = (
+                ancestors.select_related(None)
+                .readable_per_se(request.user)
+                .only("depth", "path")
+                .first()
+            )
+
+            if highest_readable is None:
+                raise (
+                    drf.exceptions.PermissionDenied()
+                    if request.user.is_authenticated
+                    else drf.exceptions.NotAuthenticated()
+                )
         paths_links_mapping = {}
         ancestors_links = []
         children_clause = db.Q()
@@ -936,37 +975,64 @@ class DocumentViewSet(
         in the payload.
         """
         # Get document while checking permissions
-        document = self.get_object()
+        document_to_duplicate = self.get_object()
 
         serializer = serializers.DocumentDuplicationSerializer(
             data=request.data, partial=True
         )
         serializer.is_valid(raise_exception=True)
         with_accesses = serializer.validated_data.get("with_accesses", False)
-        is_owner_or_admin = document.get_role(request.user) in models.PRIVILEGED_ROLES
+        user_role = document_to_duplicate.get_role(request.user)
+        is_owner_or_admin = user_role in models.PRIVILEGED_ROLES
 
-        base64_yjs_content = document.content
+        base64_yjs_content = document_to_duplicate.content
 
         # Duplicate the document instance
         link_kwargs = (
-            {"link_reach": document.link_reach, "link_role": document.link_role}
+            {
+                "link_reach": document_to_duplicate.link_reach,
+                "link_role": document_to_duplicate.link_role,
+            }
             if with_accesses
             else {}
         )
-        extracted_attachments = set(extract_attachments(document.content))
-        attachments = list(extracted_attachments & set(document.attachments))
-        duplicated_document = document.add_sibling(
+        extracted_attachments = set(extract_attachments(document_to_duplicate.content))
+        attachments = list(
+            extracted_attachments & set(document_to_duplicate.attachments)
+        )
+        title = capfirst(_("copy of {title}").format(title=document_to_duplicate.title))
+        if not document_to_duplicate.is_root() and choices.RoleChoices.get_priority(
+            user_role
+        ) < choices.RoleChoices.get_priority(models.RoleChoices.EDITOR):
+            duplicated_document = models.Document.add_root(
+                creator=self.request.user,
+                title=title,
+                content=base64_yjs_content,
+                attachments=attachments,
+                duplicated_from=document_to_duplicate,
+                **link_kwargs,
+            )
+            models.DocumentAccess.objects.create(
+                document=duplicated_document,
+                user=self.request.user,
+                role=models.RoleChoices.OWNER,
+            )
+            return drf_response.Response(
+                {"id": str(duplicated_document.id)}, status=status.HTTP_201_CREATED
+            )
+
+        duplicated_document = document_to_duplicate.add_sibling(
             "right",
-            title=capfirst(_("copy of {title}").format(title=document.title)),
+            title=title,
             content=base64_yjs_content,
             attachments=attachments,
-            duplicated_from=document,
+            duplicated_from=document_to_duplicate,
             creator=request.user,
             **link_kwargs,
         )
 
         # Always add the logged-in user as OWNER for root documents
-        if document.is_root():
+        if document_to_duplicate.is_root():
             accesses_to_create = [
                 models.DocumentAccess(
                     document=duplicated_document,
@@ -978,7 +1044,7 @@ class DocumentViewSet(
             # If accesses should be duplicated, add other users' accesses as per original document
             if with_accesses and is_owner_or_admin:
                 original_accesses = models.DocumentAccess.objects.filter(
-                    document=document
+                    document=document_to_duplicate
                 ).exclude(user=request.user)
 
                 accesses_to_create.extend(
@@ -1505,6 +1571,69 @@ class DocumentViewSet(
                 status=status.HTTP_400_BAD_REQUEST,
             )
 
+    @drf.decorators.action(
+        detail=True,
+        methods=["get"],
+        url_path="content",
+        name="Get document content in different formats",
+    )
+    def content(self, request, pk=None):
+        """
+        Retrieve document content in different formats (JSON, Markdown, HTML).
+
+        Query parameters:
+        - content_format: The desired output format (json, markdown, html)
+
+        Returns:
+            JSON response with content in the specified format.
+        """
+
+        document = self.get_object()
+
+        content_format = request.query_params.get("content_format", "json").lower()
+        if content_format not in {"json", "markdown", "html"}:
+            raise drf.exceptions.ValidationError(
+                "Invalid format. Must be one of: json, markdown, html"
+            )
+
+        # Get the base64 content from the document
+        content = None
+        base64_content = document.content
+        if base64_content is not None:
+            # Convert using the y-provider service
+            try:
+                yprovider = YdocConverter()
+                result = yprovider.convert(
+                    base64.b64decode(base64_content),
+                    "application/vnd.yjs.doc",
+                    {
+                        "markdown": "text/markdown",
+                        "html": "text/html",
+                        "json": "application/json",
+                    }[content_format],
+                )
+                content = result
+            except YProviderValidationError as e:
+                return drf_response.Response(
+                    {"error": str(e)}, status=status.HTTP_400_BAD_REQUEST
+                )
+            except YProviderServiceUnavailableError as e:
+                logger.error("Error getting content for document %s: %s", pk, e)
+                return drf_response.Response(
+                    {"error": "Failed to get document content"},
+                    status=status.HTTP_500_INTERNAL_SERVER_ERROR,
+                )
+
+        return drf_response.Response(
+            {
+                "id": str(document.id),
+                "title": document.title,
+                "content": content,
+                "created_at": document.created_at,
+                "updated_at": document.updated_at,
+            }
+        )
+
 
 class DocumentAccessViewSet(
     ResourceAccessViewsetMixin,
@@ -1555,6 +1684,7 @@ class DocumentAccessViewSet(
         "document__depth",
     )
     resource_field_name = "document"
+    throttle_scope = "document_access"
 
     @cached_property
     def document(self):
@@ -1714,6 +1844,7 @@ class TemplateViewSet(
         permissions.IsAuthenticatedOrSafe,
         permissions.ResourceWithAccessPermission,
     ]
+    throttle_scope = "template"
     ordering = ["-created_at"]
     ordering_fields = ["created_at", "updated_at", "title"]
     serializer_class = serializers.TemplateSerializer
@@ -1804,6 +1935,7 @@ class TemplateAccessViewSet(
 
     lookup_field = "pk"
     permission_classes = [permissions.ResourceAccessPermission]
+    throttle_scope = "template_access"
     queryset = models.TemplateAccess.objects.select_related("user").all()
     resource_field_name = "template"
     serializer_class = serializers.TemplateAccessSerializer
@@ -1886,6 +2018,7 @@ class InvitationViewset(
         permissions.CanCreateInvitationPermission,
         permissions.ResourceWithAccessPermission,
     ]
+    throttle_scope = "invitation"
     queryset = (
         models.Invitation.objects.all()
         .select_related("document")
@@ -1964,6 +2097,7 @@ class DocumentAskForAccessViewSet(
         permissions.IsAuthenticated,
         permissions.ResourceWithAccessPermission,
     ]
+    throttle_scope = "document_ask_for_access"
     queryset = models.DocumentAskForAccess.objects.all()
     serializer_class = serializers.DocumentAskForAccessSerializer
     _document = None
@@ -2036,6 +2170,7 @@ class ConfigView(drf.views.APIView):
     """API ViewSet for sharing some public settings."""
 
     permission_classes = [AllowAny]
+    throttle_scope = "config"
 
     def get(self, request):
         """
@@ -2056,6 +2191,7 @@ class ConfigView(drf.views.APIView):
             "LANGUAGES",
             "LANGUAGE_CODE",
             "SENTRY_DSN",
+            "TRASHBIN_CUTOFF_DAYS",
         ]
         dict_settings = {}
         for setting in array_settings:

src/backend/core/migrations/0025_alter_user_short_name.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.2.7 on 2025-10-22 06:12
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("core", "0024_add_is_masked_field_to_link_trace"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="user",
+            name="short_name",
+            field=models.CharField(
+                blank=True, max_length=100, null=True, verbose_name="short name"
+            ),
+        ),
+    ]

src/backend/core/models.py

@@ -148,7 +148,9 @@ class User(AbstractBaseUser, BaseModel, auth_models.PermissionsMixin):
     )
 
     full_name = models.CharField(_("full name"), max_length=100, null=True, blank=True)
-    short_name = models.CharField(_("short name"), max_length=20, null=True, blank=True)
+    short_name = models.CharField(
+        _("short name"), max_length=100, null=True, blank=True
+    )
 
     email = models.EmailField(_("identity email address"), blank=True, null=True)
 
@@ -221,7 +223,7 @@ class User(AbstractBaseUser, BaseModel, auth_models.PermissionsMixin):
         Expired invitations are ignored.
         """
         valid_invitations = Invitation.objects.filter(
-            email=self.email,
+            email__iexact=self.email,
             created_at__gte=(
                 timezone.now()
                 - timedelta(seconds=settings.INVITATION_VALIDITY_DURATION)
@@ -721,7 +723,7 @@ class Document(MP_Node, BaseModel):
 
         # Characteristics that are based only on specific access
         is_owner = role == RoleChoices.OWNER
-        is_deleted = self.ancestors_deleted_at and not is_owner
+        is_deleted = self.ancestors_deleted_at
         is_owner_or_admin = (is_owner or role == RoleChoices.ADMIN) and not is_deleted
 
         # Compute access roles before adding link roles because we don't
@@ -750,6 +752,7 @@ class Document(MP_Node, BaseModel):
             role = RoleChoices.max(role, link_definition["link_role"])
 
         can_get = bool(role) and not is_deleted
+        retrieve = can_get or is_owner
         can_update = (
             is_owner_or_admin or role == RoleChoices.EDITOR
         ) and not is_deleted
@@ -758,7 +761,7 @@ class Document(MP_Node, BaseModel):
             is_owner
             if self.is_root()
             else (is_owner_or_admin or (user.is_authenticated and self.creator == user))
-        )
+        ) and not is_deleted
 
         ai_allow_reach_from = settings.AI_ALLOW_REACH_FROM
         ai_access = any(
@@ -783,21 +786,22 @@ class Document(MP_Node, BaseModel):
             "children_list": can_get,
             "children_create": can_create_children,
             "collaboration_auth": can_get,
+            "content": can_get,
             "cors_proxy": can_get,
             "descendants": can_get,
             "destroy": can_destroy,
             "duplicate": can_get and user.is_authenticated,
             "favorite": can_get and user.is_authenticated,
             "link_configuration": is_owner_or_admin,
-            "invite_owner": is_owner,
+            "invite_owner": is_owner and not is_deleted,
             "mask": can_get and user.is_authenticated,
-            "move": is_owner_or_admin and not self.ancestors_deleted_at,
+            "move": is_owner_or_admin and not is_deleted,
             "partial_update": can_update,
             "restore": is_owner,
-            "retrieve": can_get,
+            "retrieve": retrieve,
             "media_auth": can_get,
             "link_select_options": link_select_options,
-            "tree": can_get,
+            "tree": retrieve,
             "update": can_update,
             "versions_destroy": is_owner_or_admin,
             "versions_list": has_access_role,

src/backend/core/services/converter_services.py

@@ -1,4 +1,4 @@
-"""Converter services."""
+"""Y-Provider API services."""
 
 from base64 import b64encode
 
@@ -28,25 +28,44 @@ class YdocConverter:
         # Note: Yprovider microservice accepts only raw token, which is not recommended
         return f"Bearer {settings.Y_PROVIDER_API_KEY}"
 
-    def convert(self, text):
+    def _request(self, url, data, content_type, accept):
+        """Make a request to the Y-Provider API."""
+        response = requests.post(
+            url,
+            data=data,
+            headers={
+                "Authorization": self.auth_header,
+                "Content-Type": content_type,
+                "Accept": accept,
+            },
+            timeout=settings.CONVERSION_API_TIMEOUT,
+            verify=settings.CONVERSION_API_SECURE,
+        )
+        response.raise_for_status()
+        return response
+
+    def convert(
+        self, text, content_type="text/markdown", accept="application/vnd.yjs.doc"
+    ):
         """Convert a Markdown text into our internal format using an external microservice."""
 
         if not text:
             raise ValidationError("Input text cannot be empty")
 
         try:
-            response = requests.post(
+            response = self._request(
                 f"{settings.Y_PROVIDER_API_BASE_URL}{settings.CONVERSION_API_ENDPOINT}/",
-                data=text,
-                headers={
-                    "Authorization": self.auth_header,
-                    "Content-Type": "text/markdown",
-                },
-                timeout=settings.CONVERSION_API_TIMEOUT,
-                verify=settings.CONVERSION_API_SECURE,
+                text,
+                content_type,
+                accept,
             )
-            response.raise_for_status()
-            return b64encode(response.content).decode("utf-8")
+            if accept == "application/vnd.yjs.doc":
+                return b64encode(response.content).decode("utf-8")
+            if accept in {"text/markdown", "text/html"}:
+                return response.text
+            if accept == "application/json":
+                return response.json()
+            raise ValidationError("Unsupported format")
         except requests.RequestException as err:
             raise ServiceUnavailableError(
                 "Failed to connect to conversion service",

src/backend/core/tests/documents/test_api_document_accesses.py

@@ -4,6 +4,7 @@ Test document accesses API endpoints for users in impress's core app.
 # pylint: disable=too-many-lines
 
 import random
+from unittest import mock
 from uuid import uuid4
 
 import pytest
@@ -1344,3 +1345,24 @@ def test_api_document_accesses_delete_owners_last_owner_child_team(
 
     assert response.status_code == 204
     assert models.DocumentAccess.objects.count() == 1
+
+
+def test_api_document_accesses_throttling(settings):
+    """Test api document accesses throttling."""
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document_access"] = "2/minute"
+    user = factories.UserFactory()
+    document = factories.DocumentFactory()
+    factories.UserDocumentAccessFactory(
+        document=document, user=user, role="administrator"
+    )
+    client = APIClient()
+    client.force_login(user)
+    for _i in range(2):
+        response = client.get(f"/api/v1.0/documents/{document.id!s}/accesses/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get(f"/api/v1.0/documents/{document.id!s}/accesses/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope document_access", "warning"
+        )

src/backend/core/tests/documents/test_api_document_invitations.py

@@ -596,6 +596,32 @@ def test_api_document_invitations_create_cannot_invite_existing_users():
     }
 
 
+def test_api_document_invitations_create_lower_email():
+    """
+    No matter the case, the email should be converted to lowercase.
+    """
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(users=[(user, "owner")])
+
+    # Build an invitation to the email of an existing identity in the db
+    invitation_values = {
+        "email": "GuEst@example.com",
+        "role": random.choice(models.RoleChoices.values),
+    }
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.post(
+        f"/api/v1.0/documents/{document.id!s}/invitations/",
+        invitation_values,
+        format="json",
+    )
+
+    assert response.status_code == 201
+    assert response.json()["email"] == "guest@example.com"
+
+
 # Update
 
 
@@ -743,6 +769,37 @@ def test_api_document_invitations_update_authenticated_unprivileged(
         assert value == old_invitation_values[key]
 
 
+@pytest.mark.parametrize("via", VIA)
+@pytest.mark.parametrize("role", ["administrator", "owner"])
+def test_api_document_invitations_patch(via, role, mock_user_teams):
+    """Partially updating an invitation should be allowed."""
+
+    user = factories.UserFactory()
+    invitation = factories.InvitationFactory(role="editor")
+
+    if via == USER:
+        factories.UserDocumentAccessFactory(
+            document=invitation.document, user=user, role=role
+        )
+    elif via == TEAM:
+        mock_user_teams.return_value = ["lasuite", "unknown"]
+        factories.TeamDocumentAccessFactory(
+            document=invitation.document, team="lasuite", role=role
+        )
+
+    client = APIClient()
+    client.force_login(user)
+
+    response = client.patch(
+        f"/api/v1.0/documents/{invitation.document.id!s}/invitations/{invitation.id!s}/",
+        {"role": "reader"},
+        format="json",
+    )
+    assert response.status_code == 200
+    invitation.refresh_from_db()
+    assert invitation.role == "reader"
+
+
 # Delete
 
 
@@ -824,3 +881,29 @@ def test_api_document_invitations_delete_readers_or_editors(via, role, mock_user
         response.json()["detail"]
         == "You do not have permission to perform this action."
     )
+
+
+def test_api_document_invitations_throttling(settings):
+    """Test api document ask for access throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["invitation"]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["invitation"] = "2/minute"
+    user = factories.UserFactory()
+    document = factories.DocumentFactory()
+
+    factories.UserDocumentAccessFactory(document=document, user=user, role="owner")
+
+    factories.InvitationFactory(document=document, issuer=user)
+
+    client = APIClient()
+    client.force_login(user)
+
+    for _i in range(2):
+        response = client.get(f"/api/v1.0/documents/{document.id}/invitations/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get(f"/api/v1.0/documents/{document.id}/invitations/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope invitation", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["invitation"] = current_rate

src/backend/core/tests/documents/test_api_documents_ask_for_access.py

@@ -1,6 +1,7 @@
 """Test API for document ask for access."""
 
 import uuid
+from unittest import mock
 
 from django.core import mail
 
@@ -768,3 +769,35 @@ def test_api_documents_ask_for_access_accept_authenticated_non_root_document(rol
         f"/api/v1.0/documents/{child.id}/ask-for-access/{document_ask_for_access.id}/accept/"
     )
     assert response.status_code == 404
+
+
+def test_api_document_ask_for_access_throttling(settings):
+    """Test api document ask for access throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"][
+        "document_ask_for_access"
+    ]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document_ask_for_access"] = (
+        "2/minute"
+    )
+    document = DocumentFactory()
+    DocumentAskForAccessFactory.create_batch(
+        3, document=document, role=RoleChoices.READER
+    )
+
+    user = UserFactory()
+
+    client = APIClient()
+    client.force_login(user)
+
+    for _i in range(2):
+        response = client.get(f"/api/v1.0/documents/{document.id}/ask-for-access/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get(f"/api/v1.0/documents/{document.id}/ask-for-access/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope document_ask_for_access", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document_ask_for_access"] = (
+        current_rate
+    )

src/backend/core/tests/documents/test_api_documents_children_list.py

@@ -41,6 +41,7 @@ def test_api_documents_children_list_anonymous_public_standalone(
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -63,6 +64,7 @@ def test_api_documents_children_list_anonymous_public_standalone(
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -115,6 +117,7 @@ def test_api_documents_children_list_anonymous_public_parent(django_assert_num_q
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -137,6 +140,7 @@ def test_api_documents_children_list_anonymous_public_parent(django_assert_num_q
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -208,6 +212,7 @@ def test_api_documents_children_list_authenticated_unrelated_public_or_authentic
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -230,6 +235,7 @@ def test_api_documents_children_list_authenticated_unrelated_public_or_authentic
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -287,6 +293,7 @@ def test_api_documents_children_list_authenticated_public_or_authenticated_paren
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -309,6 +316,7 @@ def test_api_documents_children_list_authenticated_public_or_authenticated_paren
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -393,6 +401,7 @@ def test_api_documents_children_list_authenticated_related_direct(
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -415,6 +424,7 @@ def test_api_documents_children_list_authenticated_related_direct(
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -475,6 +485,7 @@ def test_api_documents_children_list_authenticated_related_parent(
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -497,6 +508,7 @@ def test_api_documents_children_list_authenticated_related_parent(
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -609,6 +621,7 @@ def test_api_documents_children_list_authenticated_related_team_members(
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -631,6 +644,7 @@ def test_api_documents_children_list_authenticated_related_team_members(
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),

src/backend/core/tests/documents/test_api_documents_content.py

@@ -0,0 +1,176 @@
+"""
+Tests for Documents API endpoint in impress's core app: content
+"""
+
+import base64
+from unittest.mock import patch
+
+import pytest
+import requests
+from rest_framework import status
+from rest_framework.test import APIClient
+
+from core import factories
+
+pytestmark = pytest.mark.django_db
+
+
+@pytest.mark.parametrize(
+    "reach, role",
+    [
+        ("public", "reader"),
+        ("public", "editor"),
+    ],
+)
+@patch("core.services.converter_services.YdocConverter.convert")
+def test_api_documents_content_public(mock_content, reach, role):
+    """Anonymous users should be allowed to access content of public documents."""
+    document = factories.DocumentFactory(link_reach=reach, link_role=role)
+    mock_content.return_value = {"some": "data"}
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/content/")
+
+    assert response.status_code == status.HTTP_200_OK
+    data = response.json()
+    assert data["id"] == str(document.id)
+    assert data["title"] == document.title
+    assert data["content"] == {"some": "data"}
+    mock_content.assert_called_once_with(
+        base64.b64decode(document.content),
+        "application/vnd.yjs.doc",
+        "application/json",
+    )
+
+
+@pytest.mark.parametrize(
+    "reach, doc_role, user_role",
+    [
+        ("restricted", "reader", "reader"),
+        ("restricted", "reader", "editor"),
+        ("restricted", "reader", "administrator"),
+        ("restricted", "reader", "owner"),
+        ("restricted", "editor", "reader"),
+        ("restricted", "editor", "editor"),
+        ("restricted", "editor", "administrator"),
+        ("restricted", "editor", "owner"),
+        ("authenticated", "reader", None),
+        ("authenticated", "editor", None),
+    ],
+)
+@patch("core.services.converter_services.YdocConverter.convert")
+def test_api_documents_content_not_public(mock_content, reach, doc_role, user_role):
+    """Authenticated users need access to get non-public document content."""
+    user = factories.UserFactory()
+    document = factories.DocumentFactory(link_reach=reach, link_role=doc_role)
+    mock_content.return_value = {"some": "data"}
+
+    # First anonymous request should fail
+    client = APIClient()
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/content/")
+
+    assert response.status_code == status.HTTP_401_UNAUTHORIZED
+    mock_content.assert_not_called()
+
+    # Login and try again
+    client.force_login(user)
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/content/")
+
+    # If restricted, we still should not have access
+    if user_role is not None:
+        assert response.status_code == status.HTTP_403_FORBIDDEN
+        mock_content.assert_not_called()
+
+        # Create an access as a reader. This should unlock the access.
+        factories.UserDocumentAccessFactory(
+            document=document, user=user, role=user_role
+        )
+
+        response = client.get(f"/api/v1.0/documents/{document.id!s}/content/")
+
+    assert response.status_code == status.HTTP_200_OK
+    data = response.json()
+    assert data["id"] == str(document.id)
+    assert data["title"] == document.title
+    assert data["content"] == {"some": "data"}
+    mock_content.assert_called_once_with(
+        base64.b64decode(document.content),
+        "application/vnd.yjs.doc",
+        "application/json",
+    )
+
+
+@pytest.mark.parametrize(
+    "content_format, accept",
+    [
+        ("markdown", "text/markdown"),
+        ("html", "text/html"),
+        ("json", "application/json"),
+    ],
+)
+@patch("core.services.converter_services.YdocConverter.convert")
+def test_api_documents_content_format(mock_content, content_format, accept):
+    """Test that the content endpoint returns a specific format."""
+    document = factories.DocumentFactory(link_reach="public")
+    mock_content.return_value = {"some": "data"}
+
+    response = APIClient().get(
+        f"/api/v1.0/documents/{document.id!s}/content/?content_format={content_format}"
+    )
+
+    assert response.status_code == status.HTTP_200_OK
+    data = response.json()
+    assert data["id"] == str(document.id)
+    assert data["title"] == document.title
+    assert data["content"] == {"some": "data"}
+    mock_content.assert_called_once_with(
+        base64.b64decode(document.content), "application/vnd.yjs.doc", accept
+    )
+
+
+@patch("core.services.converter_services.YdocConverter._request")
+def test_api_documents_content_invalid_format(mock_request):
+    """Test that the content endpoint rejects invalid formats."""
+    document = factories.DocumentFactory(link_reach="public")
+
+    response = APIClient().get(
+        f"/api/v1.0/documents/{document.id!s}/content/?content_format=invalid"
+    )
+    assert response.status_code == status.HTTP_400_BAD_REQUEST
+    mock_request.assert_not_called()
+
+
+@patch("core.services.converter_services.YdocConverter._request")
+def test_api_documents_content_yservice_error(mock_request):
+    """Test that service errors are handled properly."""
+    document = factories.DocumentFactory(link_reach="public")
+    mock_request.side_effect = requests.RequestException()
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/content/")
+    mock_request.assert_called_once()
+    assert response.status_code == status.HTTP_500_INTERNAL_SERVER_ERROR
+
+
+@patch("core.services.converter_services.YdocConverter._request")
+def test_api_documents_content_nonexistent_document(mock_request):
+    """Test that accessing a nonexistent document returns 404."""
+    client = APIClient()
+    response = client.get(
+        "/api/v1.0/documents/00000000-0000-0000-0000-000000000000/content/"
+    )
+    assert response.status_code == status.HTTP_404_NOT_FOUND
+    mock_request.assert_not_called()
+
+
+@patch("core.services.converter_services.YdocConverter._request")
+def test_api_documents_content_empty_document(mock_request):
+    """Test that accessing an empty document returns empty content."""
+    document = factories.DocumentFactory(link_reach="public", content="")
+
+    response = APIClient().get(f"/api/v1.0/documents/{document.id!s}/content/")
+
+    assert response.status_code == status.HTTP_200_OK
+    data = response.json()
+    assert data["id"] == str(document.id)
+    assert data["title"] == document.title
+    assert data["content"] is None
+    mock_request.assert_not_called()

src/backend/core/tests/documents/test_api_documents_descendants.py

@@ -38,6 +38,7 @@ def test_api_documents_descendants_list_anonymous_public_standalone():
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -62,6 +63,7 @@ def test_api_documents_descendants_list_anonymous_public_standalone():
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 3,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -84,6 +86,7 @@ def test_api_documents_descendants_list_anonymous_public_standalone():
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -135,6 +138,7 @@ def test_api_documents_descendants_list_anonymous_public_parent():
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -157,6 +161,7 @@ def test_api_documents_descendants_list_anonymous_public_parent():
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 5,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -179,6 +184,7 @@ def test_api_documents_descendants_list_anonymous_public_parent():
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -251,6 +257,7 @@ def test_api_documents_descendants_list_authenticated_unrelated_public_or_authen
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -273,6 +280,7 @@ def test_api_documents_descendants_list_authenticated_unrelated_public_or_authen
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 3,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -295,6 +303,7 @@ def test_api_documents_descendants_list_authenticated_unrelated_public_or_authen
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -352,6 +361,7 @@ def test_api_documents_descendants_list_authenticated_public_or_authenticated_pa
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -374,6 +384,7 @@ def test_api_documents_descendants_list_authenticated_public_or_authenticated_pa
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 5,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -396,6 +407,7 @@ def test_api_documents_descendants_list_authenticated_public_or_authenticated_pa
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -474,6 +486,7 @@ def test_api_documents_descendants_list_authenticated_related_direct():
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -496,6 +509,7 @@ def test_api_documents_descendants_list_authenticated_related_direct():
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 3,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -518,6 +532,7 @@ def test_api_documents_descendants_list_authenticated_related_direct():
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -576,6 +591,7 @@ def test_api_documents_descendants_list_authenticated_related_parent():
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -598,6 +614,7 @@ def test_api_documents_descendants_list_authenticated_related_parent():
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 5,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -620,6 +637,7 @@ def test_api_documents_descendants_list_authenticated_related_parent():
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 4,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),
@@ -724,6 +742,7 @@ def test_api_documents_descendants_list_authenticated_related_team_members(
                 "computed_link_role": child1.computed_link_role,
                 "created_at": child1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child1.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child1.excerpt,
                 "id": str(child1.id),
@@ -746,6 +765,7 @@ def test_api_documents_descendants_list_authenticated_related_team_members(
                 "computed_link_role": grand_child.computed_link_role,
                 "created_at": grand_child.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(grand_child.creator.id),
+                "deleted_at": None,
                 "depth": 3,
                 "excerpt": grand_child.excerpt,
                 "id": str(grand_child.id),
@@ -768,6 +788,7 @@ def test_api_documents_descendants_list_authenticated_related_team_members(
                 "computed_link_role": child2.computed_link_role,
                 "created_at": child2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(child2.creator.id),
+                "deleted_at": None,
                 "depth": 2,
                 "excerpt": child2.excerpt,
                 "id": str(child2.id),

src/backend/core/tests/documents/test_api_documents_duplicate.py

@@ -293,3 +293,28 @@ def test_api_documents_duplicate_non_root_document(role):
     assert duplicated_accesses.count() == 0
     assert duplicated_document.is_sibling_of(child)
     assert duplicated_document.is_child_of(document)
+
+
+def test_api_documents_duplicate_reader_non_root_document():
+    """
+    Reader users should be able to duplicate non-root documents but will be
+    created as a root document.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(users=[(user, "reader")])
+    child = factories.DocumentFactory(parent=document)
+
+    assert child.get_role(user) == "reader"
+
+    response = client.post(
+        f"/api/v1.0/documents/{child.id!s}/duplicate/", format="json"
+    )
+    assert response.status_code == 201
+
+    duplicated_document = models.Document.objects.get(id=response.json()["id"])
+    assert duplicated_document.is_root()
+    assert duplicated_document.accesses.count() == 1
+    assert duplicated_document.accesses.get(user=user).role == "owner"

src/backend/core/tests/documents/test_api_documents_favorite_list.py

@@ -65,6 +65,7 @@ def test_api_document_favorite_list_authenticated_with_favorite():
                 "computed_link_role": document.computed_link_role,
                 "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(document.creator.id),
+                "deleted_at": None,
                 "content": document.content,
                 "depth": document.depth,
                 "excerpt": document.excerpt,

src/backend/core/tests/documents/test_api_documents_link_configuration.py

@@ -133,7 +133,10 @@ def test_api_documents_link_configuration_update_authenticated_related_success(
     client = APIClient()
     client.force_login(user)
 
-    document = factories.DocumentFactory()
+    document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.AUTHENTICATED,
+        link_role=models.LinkRoleChoices.READER,
+    )
     if via == USER:
         factories.UserDocumentAccessFactory(document=document, user=user, role=role)
     elif via == TEAM:
@@ -143,7 +146,10 @@ def test_api_documents_link_configuration_update_authenticated_related_success(
         )
 
     new_document_values = serializers.LinkDocumentSerializer(
-        instance=factories.DocumentFactory()
+        instance=factories.DocumentFactory(
+            link_reach=models.LinkReachChoices.PUBLIC,
+            link_role=models.LinkRoleChoices.EDITOR,
+        )
     ).data
 
     with mock_reset_connections(document.id):
@@ -158,3 +164,240 @@ def test_api_documents_link_configuration_update_authenticated_related_success(
         document_values = serializers.LinkDocumentSerializer(instance=document).data
         for key, value in document_values.items():
             assert value == new_document_values[key]
+
+
+def test_api_documents_link_configuration_update_role_restricted_forbidden():
+    """
+    Test that trying to set link_role on a document with restricted link_reach
+    returns a validation error.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.RESTRICTED,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    # Try to set a meaningful role on a restricted document
+    new_data = {
+        "link_reach": models.LinkReachChoices.RESTRICTED,
+        "link_role": models.LinkRoleChoices.EDITOR,
+    }
+
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/link-configuration/",
+        new_data,
+        format="json",
+    )
+
+    assert response.status_code == 400
+    assert "link_role" in response.json()
+    assert (
+        "Cannot set link_role when link_reach is 'restricted'"
+        in response.json()["link_role"][0]
+    )
+
+
+def test_api_documents_link_configuration_update_link_reach_required():
+    """
+    Test that link_reach is required when updating link configuration.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.PUBLIC,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    # Try to update without providing link_reach
+    new_data = {"link_role": models.LinkRoleChoices.EDITOR}
+
+    response = client.put(
+        f"/api/v1.0/documents/{document.id!s}/link-configuration/",
+        new_data,
+        format="json",
+    )
+
+    assert response.status_code == 400
+    assert "link_reach" in response.json()
+    assert "This field is required" in response.json()["link_reach"][0]
+
+
+def test_api_documents_link_configuration_update_restricted_without_role_success(
+    mock_reset_connections,  # pylint: disable=redefined-outer-name
+):
+    """
+    Test that setting link_reach to restricted without specifying link_role succeeds.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.PUBLIC,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    # Only specify link_reach, not link_role
+    new_data = {
+        "link_reach": models.LinkReachChoices.RESTRICTED,
+    }
+
+    with mock_reset_connections(document.id):
+        response = client.put(
+            f"/api/v1.0/documents/{document.id!s}/link-configuration/",
+            new_data,
+            format="json",
+        )
+
+        assert response.status_code == 200
+        document.refresh_from_db()
+        assert document.link_reach == models.LinkReachChoices.RESTRICTED
+
+
+@pytest.mark.parametrize(
+    "reach", [models.LinkReachChoices.PUBLIC, models.LinkReachChoices.AUTHENTICATED]
+)
+@pytest.mark.parametrize("role", models.LinkRoleChoices.values)
+def test_api_documents_link_configuration_update_non_restricted_with_valid_role_success(
+    reach,
+    role,
+    mock_reset_connections,  # pylint: disable=redefined-outer-name
+):
+    """
+    Test that setting non-restricted link_reach with valid link_role succeeds.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.RESTRICTED,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    new_data = {
+        "link_reach": reach,
+        "link_role": role,
+    }
+
+    with mock_reset_connections(document.id):
+        response = client.put(
+            f"/api/v1.0/documents/{document.id!s}/link-configuration/",
+            new_data,
+            format="json",
+        )
+
+        assert response.status_code == 200
+        document.refresh_from_db()
+        assert document.link_reach == reach
+        assert document.link_role == role
+
+
+def test_api_documents_link_configuration_update_with_ancestor_constraints():
+    """
+    Test that link configuration respects ancestor constraints using get_select_options.
+    This test may need adjustment based on the actual get_select_options implementation.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    parent_document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.PUBLIC,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    child_document = factories.DocumentFactory(
+        parent=parent_document,
+        link_reach=models.LinkReachChoices.PUBLIC,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=child_document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    # Try to set child to PUBLIC when parent is RESTRICTED
+    new_data = {
+        "link_reach": models.LinkReachChoices.RESTRICTED,
+        "link_role": models.LinkRoleChoices.READER,
+    }
+
+    response = client.put(
+        f"/api/v1.0/documents/{child_document.id!s}/link-configuration/",
+        new_data,
+        format="json",
+    )
+
+    assert response.status_code == 400
+    assert "link_reach" in response.json()
+    assert (
+        "Link reach 'restricted' is not allowed based on parent"
+        in response.json()["link_reach"][0]
+    )
+
+
+def test_api_documents_link_configuration_update_invalid_role_for_reach_validation():
+    """
+    Test the specific validation logic that checks if link_role is allowed for link_reach.
+    This tests the code section that validates allowed_roles from get_select_options.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    parent_document = factories.DocumentFactory(
+        link_reach=models.LinkReachChoices.AUTHENTICATED,
+        link_role=models.LinkRoleChoices.EDITOR,
+    )
+
+    child_document = factories.DocumentFactory(
+        parent=parent_document,
+        link_reach=models.LinkReachChoices.RESTRICTED,
+        link_role=models.LinkRoleChoices.READER,
+    )
+
+    factories.UserDocumentAccessFactory(
+        document=child_document, user=user, role=models.RoleChoices.OWNER
+    )
+
+    new_data = {
+        "link_reach": models.LinkReachChoices.AUTHENTICATED,
+        "link_role": models.LinkRoleChoices.READER,  # This should be rejected
+    }
+
+    response = client.put(
+        f"/api/v1.0/documents/{child_document.id!s}/link-configuration/",
+        new_data,
+        format="json",
+    )
+
+    assert response.status_code == 400
+    assert "link_role" in response.json()
+    error_message = response.json()["link_role"][0]
+    assert (
+        "Link role 'reader' is not allowed for link reach 'authenticated'"
+        in error_message
+    )
+    assert "Allowed roles: editor" in error_message

src/backend/core/tests/documents/test_api_documents_list.py

@@ -69,6 +69,7 @@ def test_api_documents_list_format():
         "computed_link_role": document.computed_link_role,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": True,
@@ -427,3 +428,20 @@ def test_api_documents_list_favorites_no_extra_queries(django_assert_num_queries
             assert result["is_favorite"] is True
         else:
             assert result["is_favorite"] is False
+
+
+def test_api_documents_list_throttling(settings):
+    """Test api documents throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document"]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document"] = "2/minute"
+    client = APIClient()
+    for _i in range(2):
+        response = client.get("/api/v1.0/documents/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get("/api/v1.0/documents/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope document", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["document"] = current_rate

src/backend/core/tests/documents/test_api_documents_retrieve.py

@@ -37,6 +37,7 @@ def test_api_documents_retrieve_anonymous_public_standalone():
             "children_list": True,
             "collaboration_auth": True,
             "cors_proxy": True,
+            "content": True,
             "descendants": True,
             "destroy": False,
             "duplicate": False,
@@ -69,6 +70,7 @@ def test_api_documents_retrieve_anonymous_public_standalone():
         "content": document.content,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": False,
@@ -113,6 +115,7 @@ def test_api_documents_retrieve_anonymous_public_parent():
             "collaboration_auth": True,
             "descendants": True,
             "cors_proxy": True,
+            "content": True,
             "destroy": False,
             "duplicate": False,
             # Anonymous user can't favorite a document even with read access
@@ -142,6 +145,7 @@ def test_api_documents_retrieve_anonymous_public_parent():
         "content": document.content,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 3,
         "excerpt": document.excerpt,
         "is_favorite": False,
@@ -218,6 +222,7 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
             "collaboration_auth": True,
             "descendants": True,
             "cors_proxy": True,
+            "content": True,
             "destroy": False,
             "duplicate": True,
             "favorite": True,
@@ -249,6 +254,7 @@ def test_api_documents_retrieve_authenticated_unrelated_public_or_authenticated(
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
         "depth": 1,
+        "deleted_at": None,
         "excerpt": document.excerpt,
         "is_favorite": False,
         "link_reach": reach,
@@ -300,6 +306,7 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
             "collaboration_auth": True,
             "descendants": True,
             "cors_proxy": True,
+            "content": True,
             "destroy": False,
             "duplicate": True,
             "favorite": True,
@@ -329,6 +336,7 @@ def test_api_documents_retrieve_authenticated_public_or_authenticated_parent(rea
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
         "depth": 3,
+        "deleted_at": None,
         "excerpt": document.excerpt,
         "is_favorite": False,
         "link_reach": document.link_reach,
@@ -442,6 +450,7 @@ def test_api_documents_retrieve_authenticated_related_direct():
         "content": document.content,
         "creator": str(document.creator.id),
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": False,
@@ -494,6 +503,7 @@ def test_api_documents_retrieve_authenticated_related_parent():
             "collaboration_auth": True,
             "descendants": True,
             "cors_proxy": True,
+            "content": True,
             "destroy": access.role in ["administrator", "owner"],
             "duplicate": True,
             "favorite": True,
@@ -523,6 +533,7 @@ def test_api_documents_retrieve_authenticated_related_parent():
         "creator": str(document.creator.id),
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "depth": 3,
+        "deleted_at": None,
         "excerpt": document.excerpt,
         "is_favorite": False,
         "link_reach": "restricted",
@@ -678,6 +689,7 @@ def test_api_documents_retrieve_authenticated_related_team_members(
         "content": document.content,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": False,
@@ -744,6 +756,7 @@ def test_api_documents_retrieve_authenticated_related_team_administrators(
         "content": document.content,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": False,
@@ -810,6 +823,7 @@ def test_api_documents_retrieve_authenticated_related_team_owners(
         "content": document.content,
         "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(document.creator.id),
+        "deleted_at": None,
         "depth": 1,
         "excerpt": document.excerpt,
         "is_favorite": False,

src/backend/core/tests/documents/test_api_documents_trashbin.py

@@ -48,11 +48,11 @@ def test_api_documents_trashbin_format():
 
     other_users = factories.UserFactory.create_batch(3)
     document = factories.DocumentFactory(
-        deleted_at=timezone.now(),
         users=factories.UserFactory.create_batch(2),
         favorited_by=[user, *other_users],
         link_traces=other_users,
     )
+    document.soft_delete()
     factories.UserDocumentAccessFactory(document=document, user=user, role="owner")
 
     response = client.get("/api/v1.0/documents/trashbin/")
@@ -70,39 +70,40 @@ def test_api_documents_trashbin_format():
     assert results[0] == {
         "id": str(document.id),
         "abilities": {
-            "accesses_manage": True,
-            "accesses_view": True,
-            "ai_transform": True,
-            "ai_translate": True,
-            "attachment_upload": True,
-            "can_edit": True,
-            "children_create": True,
-            "children_list": True,
-            "collaboration_auth": True,
-            "descendants": True,
-            "cors_proxy": True,
-            "destroy": True,
-            "duplicate": True,
-            "favorite": True,
-            "invite_owner": True,
-            "link_configuration": True,
+            "accesses_manage": False,
+            "accesses_view": False,
+            "ai_transform": False,
+            "ai_translate": False,
+            "attachment_upload": False,
+            "can_edit": False,
+            "children_create": False,
+            "children_list": False,
+            "collaboration_auth": False,
+            "descendants": False,
+            "cors_proxy": False,
+            "content": False,
+            "destroy": False,
+            "duplicate": False,
+            "favorite": False,
+            "invite_owner": False,
+            "link_configuration": False,
             "link_select_options": {
                 "authenticated": ["reader", "editor"],
                 "public": ["reader", "editor"],
                 "restricted": None,
             },
-            "mask": True,
-            "media_auth": True,
-            "media_check": True,
+            "mask": False,
+            "media_auth": False,
+            "media_check": False,
             "move": False,  # Can't move a deleted document
-            "partial_update": True,
+            "partial_update": False,
             "restore": True,
             "retrieve": True,
             "tree": True,
-            "update": True,
-            "versions_destroy": True,
-            "versions_list": True,
-            "versions_retrieve": True,
+            "update": False,
+            "versions_destroy": False,
+            "versions_list": False,
+            "versions_retrieve": False,
         },
         "ancestors_link_reach": None,
         "ancestors_link_role": None,
@@ -112,6 +113,7 @@ def test_api_documents_trashbin_format():
         "creator": str(document.creator.id),
         "depth": 1,
         "excerpt": document.excerpt,
+        "deleted_at": document.ancestors_deleted_at.isoformat().replace("+00:00", "Z"),
         "link_reach": document.link_reach,
         "link_role": document.link_role,
         "nb_accesses_ancestors": 0,
@@ -164,10 +166,10 @@ def test_api_documents_trashbin_authenticated_direct(django_assert_num_queries):
 
     expected_ids = {str(document1.id), str(document2.id), str(document3.id)}
 
-    with django_assert_num_queries(10):
+    with django_assert_num_queries(11):
         response = client.get("/api/v1.0/documents/trashbin/")
 
-    with django_assert_num_queries(4):
+    with django_assert_num_queries(5):
         response = client.get("/api/v1.0/documents/trashbin/")
 
     assert response.status_code == 200
@@ -206,10 +208,10 @@ def test_api_documents_trashbin_authenticated_via_team(
 
     expected_ids = {str(deleted_document_team1.id), str(deleted_document_team2.id)}
 
-    with django_assert_num_queries(7):
+    with django_assert_num_queries(8):
         response = client.get("/api/v1.0/documents/trashbin/")
 
-    with django_assert_num_queries(3):
+    with django_assert_num_queries(4):
         response = client.get("/api/v1.0/documents/trashbin/")
 
     assert response.status_code == 200
@@ -291,3 +293,29 @@ def test_api_documents_trashbin_distinct():
     content = response.json()
     assert len(content["results"]) == 1
     assert content["results"][0]["id"] == str(document.id)
+
+
+def test_api_documents_trashbin_empty_queryset_bug():
+    """
+    Test that users with no owner role don't see documents.
+    """
+    # Create a new user with no owner access to any document
+    new_user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(new_user)
+
+    # Create some deleted documents owned by other users
+    other_user = factories.UserFactory()
+    item1 = factories.DocumentFactory(users=[(other_user, "owner")])
+    item1.soft_delete()
+    item2 = factories.DocumentFactory(users=[(other_user, "owner")])
+    item2.soft_delete()
+    item3 = factories.DocumentFactory(users=[(other_user, "owner")])
+    item3.soft_delete()
+
+    response = client.get("/api/v1.0/documents/trashbin/")
+
+    assert response.status_code == 200
+    content = response.json()
+    assert content["count"] == 0
+    assert len(content["results"]) == 0

src/backend/core/tests/documents/test_api_documents_tree.py

@@ -50,6 +50,7 @@ def test_api_documents_tree_list_anonymous_public_standalone(django_assert_num_q
                         ),
                         "creator": str(child.creator.id),
                         "depth": 3,
+                        "deleted_at": None,
                         "excerpt": child.excerpt,
                         "id": str(child.id),
                         "is_favorite": False,
@@ -73,6 +74,7 @@ def test_api_documents_tree_list_anonymous_public_standalone(django_assert_num_q
                 "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(document.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": document.excerpt,
                 "id": str(document.id),
                 "is_favorite": False,
@@ -96,6 +98,7 @@ def test_api_documents_tree_list_anonymous_public_standalone(django_assert_num_q
                 "created_at": sibling1.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(sibling1.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": sibling1.excerpt,
                 "id": str(sibling1.id),
                 "is_favorite": False,
@@ -119,6 +122,7 @@ def test_api_documents_tree_list_anonymous_public_standalone(django_assert_num_q
                 "created_at": sibling2.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(sibling2.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": sibling2.excerpt,
                 "id": str(sibling2.id),
                 "is_favorite": False,
@@ -138,6 +142,7 @@ def test_api_documents_tree_list_anonymous_public_standalone(django_assert_num_q
         "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(parent.creator.id),
         "depth": 1,
+        "deleted_at": None,
         "excerpt": parent.excerpt,
         "id": str(parent.id),
         "is_favorite": False,
@@ -210,6 +215,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
                                 ),
                                 "creator": str(child.creator.id),
                                 "depth": 5,
+                                "deleted_at": None,
                                 "excerpt": child.excerpt,
                                 "id": str(child.id),
                                 "is_favorite": False,
@@ -233,6 +239,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
                         ),
                         "creator": str(document.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document.excerpt,
                         "id": str(document.id),
                         "is_favorite": False,
@@ -260,6 +267,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
                         ),
                         "creator": str(document_sibling.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document_sibling.excerpt,
                         "id": str(document_sibling.id),
                         "is_favorite": False,
@@ -281,6 +289,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
                 "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(parent.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent.excerpt,
                 "id": str(parent.id),
                 "is_favorite": False,
@@ -306,6 +315,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
                 ),
                 "creator": str(parent_sibling.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent_sibling.excerpt,
                 "id": str(parent_sibling.id),
                 "is_favorite": False,
@@ -327,6 +337,7 @@ def test_api_documents_tree_list_anonymous_public_parent():
         "created_at": grand_parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(grand_parent.creator.id),
         "depth": 2,
+        "deleted_at": None,
         "excerpt": grand_parent.excerpt,
         "id": str(grand_parent.id),
         "is_favorite": False,
@@ -406,6 +417,7 @@ def test_api_documents_tree_list_authenticated_unrelated_public_or_authenticated
                         ),
                         "creator": str(child.creator.id),
                         "depth": 3,
+                        "deleted_at": None,
                         "excerpt": child.excerpt,
                         "id": str(child.id),
                         "is_favorite": False,
@@ -427,6 +439,7 @@ def test_api_documents_tree_list_authenticated_unrelated_public_or_authenticated
                 "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(document.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": document.excerpt,
                 "id": str(document.id),
                 "is_favorite": False,
@@ -450,6 +463,7 @@ def test_api_documents_tree_list_authenticated_unrelated_public_or_authenticated
                 "created_at": sibling.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(sibling.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": sibling.excerpt,
                 "id": str(sibling.id),
                 "is_favorite": False,
@@ -469,6 +483,7 @@ def test_api_documents_tree_list_authenticated_unrelated_public_or_authenticated
         "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(parent.creator.id),
         "depth": 1,
+        "deleted_at": None,
         "excerpt": parent.excerpt,
         "id": str(parent.id),
         "is_favorite": False,
@@ -546,6 +561,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
                                 ),
                                 "creator": str(child.creator.id),
                                 "depth": 5,
+                                "deleted_at": None,
                                 "excerpt": child.excerpt,
                                 "id": str(child.id),
                                 "is_favorite": False,
@@ -569,6 +585,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
                         ),
                         "creator": str(document.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document.excerpt,
                         "id": str(document.id),
                         "is_favorite": False,
@@ -596,6 +613,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
                         ),
                         "creator": str(document_sibling.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document_sibling.excerpt,
                         "id": str(document_sibling.id),
                         "is_favorite": False,
@@ -617,6 +635,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
                 "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(parent.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent.excerpt,
                 "id": str(parent.id),
                 "is_favorite": False,
@@ -642,6 +661,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
                 ),
                 "creator": str(parent_sibling.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent_sibling.excerpt,
                 "id": str(parent_sibling.id),
                 "is_favorite": False,
@@ -663,6 +683,7 @@ def test_api_documents_tree_list_authenticated_public_or_authenticated_parent(
         "created_at": grand_parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(grand_parent.creator.id),
         "depth": 2,
+        "deleted_at": None,
         "excerpt": grand_parent.excerpt,
         "id": str(grand_parent.id),
         "is_favorite": False,
@@ -744,6 +765,7 @@ def test_api_documents_tree_list_authenticated_related_direct():
                         ),
                         "creator": str(child.creator.id),
                         "depth": 3,
+                        "deleted_at": None,
                         "excerpt": child.excerpt,
                         "id": str(child.id),
                         "is_favorite": False,
@@ -765,6 +787,7 @@ def test_api_documents_tree_list_authenticated_related_direct():
                 "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(document.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": document.excerpt,
                 "id": str(document.id),
                 "is_favorite": False,
@@ -788,6 +811,7 @@ def test_api_documents_tree_list_authenticated_related_direct():
                 "created_at": sibling.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(sibling.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": sibling.excerpt,
                 "id": str(sibling.id),
                 "is_favorite": False,
@@ -807,6 +831,7 @@ def test_api_documents_tree_list_authenticated_related_direct():
         "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(parent.creator.id),
         "depth": 1,
+        "deleted_at": None,
         "excerpt": parent.excerpt,
         "id": str(parent.id),
         "is_favorite": False,
@@ -888,6 +913,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
                                 ),
                                 "creator": str(child.creator.id),
                                 "depth": 5,
+                                "deleted_at": None,
                                 "excerpt": child.excerpt,
                                 "id": str(child.id),
                                 "is_favorite": False,
@@ -911,6 +937,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
                         ),
                         "creator": str(document.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document.excerpt,
                         "id": str(document.id),
                         "is_favorite": False,
@@ -938,6 +965,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
                         ),
                         "creator": str(document_sibling.creator.id),
                         "depth": 4,
+                        "deleted_at": None,
                         "excerpt": document_sibling.excerpt,
                         "id": str(document_sibling.id),
                         "is_favorite": False,
@@ -959,6 +987,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
                 "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(parent.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent.excerpt,
                 "id": str(parent.id),
                 "is_favorite": False,
@@ -984,6 +1013,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
                 ),
                 "creator": str(parent_sibling.creator.id),
                 "depth": 3,
+                "deleted_at": None,
                 "excerpt": parent_sibling.excerpt,
                 "id": str(parent_sibling.id),
                 "is_favorite": False,
@@ -1005,6 +1035,7 @@ def test_api_documents_tree_list_authenticated_related_parent():
         "created_at": grand_parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(grand_parent.creator.id),
         "depth": 2,
+        "deleted_at": None,
         "excerpt": grand_parent.excerpt,
         "id": str(grand_parent.id),
         "is_favorite": False,
@@ -1094,6 +1125,7 @@ def test_api_documents_tree_list_authenticated_related_team_members(
                         ),
                         "creator": str(child.creator.id),
                         "depth": 3,
+                        "deleted_at": None,
                         "excerpt": child.excerpt,
                         "id": str(child.id),
                         "is_favorite": False,
@@ -1115,6 +1147,7 @@ def test_api_documents_tree_list_authenticated_related_team_members(
                 "created_at": document.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(document.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": document.excerpt,
                 "id": str(document.id),
                 "is_favorite": False,
@@ -1138,6 +1171,7 @@ def test_api_documents_tree_list_authenticated_related_team_members(
                 "created_at": sibling.created_at.isoformat().replace("+00:00", "Z"),
                 "creator": str(sibling.creator.id),
                 "depth": 2,
+                "deleted_at": None,
                 "excerpt": sibling.excerpt,
                 "id": str(sibling.id),
                 "is_favorite": False,
@@ -1157,6 +1191,7 @@ def test_api_documents_tree_list_authenticated_related_team_members(
         "created_at": parent.created_at.isoformat().replace("+00:00", "Z"),
         "creator": str(parent.creator.id),
         "depth": 1,
+        "deleted_at": None,
         "excerpt": parent.excerpt,
         "id": str(parent.id),
         "is_favorite": False,
@@ -1170,3 +1205,56 @@ def test_api_documents_tree_list_authenticated_related_team_members(
         "updated_at": parent.updated_at.isoformat().replace("+00:00", "Z"),
         "user_role": access.role,
     }
+
+
+def test_api_documents_tree_list_deleted_document():
+    """
+    Tree of a deleted document should only be accessible to the owner.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    parent = factories.DocumentFactory(link_reach="public")
+    document, _ = factories.DocumentFactory.create_batch(2, parent=parent)
+    factories.DocumentFactory(link_reach="public", parent=document)
+
+    document.soft_delete()
+
+    response = client.get(f"/api/v1.0/documents/{document.id!s}/tree/")
+    assert response.status_code == 403
+
+
+def test_api_documents_tree_list_deleted_document_owner(django_assert_num_queries):
+    """
+    Tree of a deleted document should only be accessible to the owner.
+    """
+    user = factories.UserFactory()
+    client = APIClient()
+    client.force_login(user)
+
+    parent = factories.DocumentFactory(link_reach="public", users=[(user, "owner")])
+    document, _ = factories.DocumentFactory.create_batch(2, parent=parent)
+    child = factories.DocumentFactory(parent=document)
+
+    document.soft_delete()
+    document.refresh_from_db()
+    child.refresh_from_db()
+
+    with django_assert_num_queries(9):
+        client.get(f"/api/v1.0/documents/{document.id!s}/tree/")
+
+    with django_assert_num_queries(5):
+        response = client.get(f"/api/v1.0/documents/{document.id!s}/tree/")
+
+    assert response.status_code == 200
+    content = response.json()
+    assert content["id"] == str(document.id)
+    assert content["deleted_at"] == document.deleted_at.isoformat().replace(
+        "+00:00", "Z"
+    )
+    assert len(content["children"]) == 1
+    assert content["children"][0]["id"] == str(child.id)
+    assert content["children"][0][
+        "deleted_at"
+    ] == child.ancestors_deleted_at.isoformat().replace("+00:00", "Z")

src/backend/core/tests/templates/test_api_template_accesses.py

@@ -3,6 +3,7 @@ Test template accesses API endpoints for users in impress's core app.
 """
 
 import random
+from unittest import mock
 from uuid import uuid4
 
 import pytest
@@ -773,3 +774,26 @@ def test_api_template_accesses_delete_owners_last_owner(via, mock_user_teams):
 
     assert response.status_code == 403
     assert models.TemplateAccess.objects.count() == 2
+
+
+def test_api_template_accesses_throttling(settings):
+    """Test api template accesses throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template_access"]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template_access"] = "2/minute"
+    template = factories.TemplateFactory()
+    user = factories.UserFactory()
+    factories.UserTemplateAccessFactory(
+        template=template, user=user, role="administrator"
+    )
+    client = APIClient()
+    client.force_login(user)
+    for _i in range(2):
+        response = client.get(f"/api/v1.0/templates/{template.id!s}/accesses/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get(f"/api/v1.0/templates/{template.id!s}/accesses/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope template_access", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template_access"] = current_rate

src/backend/core/tests/templates/test_api_templates_list.py

@@ -218,3 +218,20 @@ def test_api_templates_list_order_param():
     assert response_template_ids == templates_ids, (
         "created_at values are not sorted from oldest to newest"
     )
+
+
+def test_api_template_throttling(settings):
+    """Test api template throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template"]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template"] = "2/minute"
+    client = APIClient()
+    for _i in range(2):
+        response = client.get("/api/v1.0/templates/")
+        assert response.status_code == 200
+    with mock.patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get("/api/v1.0/templates/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope template", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["template"] = current_rate

src/backend/core/tests/test_api_config.py

@@ -3,6 +3,7 @@ Test config API endpoints in the Impress core app.
 """
 
 import json
+from unittest.mock import patch
 
 from django.test import override_settings
 
@@ -41,6 +42,7 @@ def test_api_config(is_authenticated):
     response = client.get("/api/v1.0/config/")
     assert response.status_code == HTTP_200_OK
     assert response.json() == {
+        "AI_FEATURE_ENABLED": False,
         "COLLABORATION_WS_URL": "http://testcollab/",
         "COLLABORATION_WS_NOT_CONNECTED_READY_ONLY": True,
         "CRISP_WEBSITE_ID": "123",
@@ -59,7 +61,7 @@ def test_api_config(is_authenticated):
         "MEDIA_BASE_URL": "http://testserver/",
         "POSTHOG_KEY": {"id": "132456", "host": "https://eu.i.posthog-test.com"},
         "SENTRY_DSN": "https://sentry.test/123",
-        "AI_FEATURE_ENABLED": False,
+        "TRASHBIN_CUTOFF_DAYS": 30,
         "theme_customization": {},
     }
     policy_list = sorted(response.headers["Content-Security-Policy"].split("; "))
@@ -174,3 +176,20 @@ def test_api_config_with_original_theme_customization(is_authenticated, settings
         theme_customization = json.load(f)
 
     assert content["theme_customization"] == theme_customization
+
+
+def test_api_config_throttling(settings):
+    """Test api config throttling."""
+    current_rate = settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["config"]
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["config"] = "2/minute"
+    client = APIClient()
+    for _i in range(2):
+        response = client.get("/api/v1.0/config/")
+        assert response.status_code == 200
+    with patch("core.api.throttling.capture_message") as mock_capture_message:
+        response = client.get("/api/v1.0/config/")
+        assert response.status_code == 429
+        mock_capture_message.assert_called_once_with(
+            "Rate limit exceeded for scope config", "warning"
+        )
+    settings.REST_FRAMEWORK["DEFAULT_THROTTLE_RATES"]["config"] = current_rate

src/backend/core/tests/test_api_users.py

@@ -194,18 +194,41 @@ def test_api_users_list_query_short_queries():
     factories.UserFactory(email="john.lennon@example.com")
 
     response = client.get("/api/v1.0/users/?q=jo")
-    assert response.status_code == 200
-    assert response.json() == []
+    assert response.status_code == 400
+    assert response.json() == {
+        "q": ["Ensure this value has at least 5 characters (it has 2)."]
+    }
 
     response = client.get("/api/v1.0/users/?q=john")
-    assert response.status_code == 200
-    assert response.json() == []
+    assert response.status_code == 400
+    assert response.json() == {
+        "q": ["Ensure this value has at least 5 characters (it has 4)."]
+    }
 
     response = client.get("/api/v1.0/users/?q=john.")
     assert response.status_code == 200
     assert len(response.json()) == 2
 
 
+def test_api_users_list_query_long_queries():
+    """
+    Queries longer than 255 characters should return an empty result set.
+    """
+    user = factories.UserFactory(email="paul@example.com")
+    client = APIClient()
+    client.force_login(user)
+
+    factories.UserFactory(email="john.doe@example.com")
+    factories.UserFactory(email="john.lennon@example.com")
+
+    query = "a" * 244
+    response = client.get(f"/api/v1.0/users/?q={query}@example.com")
+    assert response.status_code == 400
+    assert response.json() == {
+        "q": ["Ensure this value has at most 254 characters (it has 256)."]
+    }
+
+
 def test_api_users_list_query_inactive():
     """Inactive users should not be listed."""
     user = factories.UserFactory()

src/backend/core/tests/test_models_documents.py

@@ -161,6 +161,7 @@ def test_models_documents_get_abilities_forbidden(
         "collaboration_auth": False,
         "descendants": False,
         "cors_proxy": False,
+        "content": False,
         "destroy": False,
         "duplicate": False,
         "favorite": False,
@@ -224,6 +225,7 @@ def test_models_documents_get_abilities_reader(
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": is_authenticated,
         "favorite": is_authenticated,
@@ -289,6 +291,7 @@ def test_models_documents_get_abilities_editor(
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": is_authenticated,
         "favorite": is_authenticated,
@@ -343,6 +346,7 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": True,
         "duplicate": True,
         "favorite": True,
@@ -371,8 +375,42 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
 
     document.soft_delete()
     document.refresh_from_db()
-    expected_abilities["move"] = False
-    assert document.get_abilities(user) == expected_abilities
+    assert document.get_abilities(user) == {
+        "accesses_manage": False,
+        "accesses_view": False,
+        "ai_transform": False,
+        "ai_translate": False,
+        "attachment_upload": False,
+        "can_edit": False,
+        "children_create": False,
+        "children_list": False,
+        "collaboration_auth": False,
+        "descendants": False,
+        "cors_proxy": False,
+        "content": False,
+        "destroy": False,
+        "duplicate": False,
+        "favorite": False,
+        "invite_owner": False,
+        "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": None,
+        },
+        "mask": False,
+        "media_auth": False,
+        "media_check": False,
+        "move": False,
+        "partial_update": False,
+        "restore": True,
+        "retrieve": True,
+        "tree": True,
+        "update": False,
+        "versions_destroy": False,
+        "versions_list": False,
+        "versions_retrieve": False,
+    }
 
 
 @override_settings(
@@ -394,6 +432,7 @@ def test_models_documents_get_abilities_administrator(django_assert_num_queries)
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": True,
         "favorite": True,
@@ -448,6 +487,7 @@ def test_models_documents_get_abilities_editor_user(django_assert_num_queries):
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": True,
         "favorite": True,
@@ -509,6 +549,7 @@ def test_models_documents_get_abilities_reader_user(
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": True,
         "favorite": True,
@@ -568,6 +609,7 @@ def test_models_documents_get_abilities_preset_role(django_assert_num_queries):
         "collaboration_auth": True,
         "descendants": True,
         "cors_proxy": True,
+        "content": True,
         "destroy": False,
         "duplicate": True,
         "favorite": True,

src/backend/core/tests/test_models_users.py

@@ -8,7 +8,7 @@ from django.core.exceptions import ValidationError
 
 import pytest
 
-from core import factories
+from core import factories, models
 
 pytestmark = pytest.mark.django_db
 
@@ -66,3 +66,33 @@ def test_models_users_sub_validator(sub, is_valid):
             match=("Enter a valid sub. This value should be ASCII only."),
         ):
             user.full_clean()
+
+
+def test_modes_users_convert_valid_invitations():
+    """
+    The "convert_valid_invitations" method should convert valid invitations to document accesses.
+    """
+    email = "test@example.com"
+    document = factories.DocumentFactory()
+    other_document = factories.DocumentFactory()
+    invitation_document = factories.InvitationFactory(email=email, document=document)
+    invitation_other_document = factories.InvitationFactory(
+        email="Test@example.coM", document=other_document
+    )
+    other_email_invitation = factories.InvitationFactory(
+        email="pre_test@example.com", document=document
+    )
+
+    assert document.accesses.count() == 0
+    assert other_document.accesses.count() == 0
+
+    user = factories.UserFactory(email=email)
+
+    assert document.accesses.filter(user=user).count() == 1
+    assert other_document.accesses.filter(user=user).count() == 1
+
+    assert not models.Invitation.objects.filter(id=invitation_document.id).exists()
+    assert not models.Invitation.objects.filter(
+        id=invitation_other_document.id
+    ).exists()
+    assert models.Invitation.objects.filter(id=other_email_invitation.id).exists()

src/backend/core/tests/test_services_converter_services.py

@@ -1,4 +1,4 @@
-"""Test converter services."""
+"""Test y-provider services."""
 
 from base64 import b64decode
 from unittest.mock import MagicMock, patch
@@ -84,6 +84,42 @@ def test_convert_full_integration(mock_post, settings):
         headers={
             "Authorization": "Bearer test-key",
             "Content-Type": "text/markdown",
+            "Accept": "application/vnd.yjs.doc",
+        },
+        timeout=5,
+        verify=False,
+    )
+
+
+@patch("requests.post")
+def test_convert_full_integration_with_specific_headers(mock_post, settings):
+    """Test successful conversion with specific content type and accept headers."""
+    settings.Y_PROVIDER_API_BASE_URL = "http://test.com/"
+    settings.Y_PROVIDER_API_KEY = "test-key"
+    settings.CONVERSION_API_ENDPOINT = "conversion-endpoint"
+    settings.CONVERSION_API_TIMEOUT = 5
+    settings.CONVERSION_API_SECURE = False
+
+    converter = YdocConverter()
+
+    expected_response = "# Test Document\n\nThis is test content."
+    mock_response = MagicMock()
+    mock_response.text = expected_response
+    mock_response.raise_for_status.return_value = None
+    mock_post.return_value = mock_response
+
+    result = converter.convert(
+        b"test_content", "application/vnd.yjs.doc", "text/markdown"
+    )
+
+    assert result == expected_response
+    mock_post.assert_called_once_with(
+        "http://test.com/conversion-endpoint/",
+        data=b"test_content",
+        headers={
+            "Authorization": "Bearer test-key",
+            "Content-Type": "application/vnd.yjs.doc",
+            "Accept": "text/markdown",
         },
         timeout=5,
         verify=False,

src/backend/demo/defaults.py

@@ -8,11 +8,19 @@ NB_OBJECTS = {
 
 DEV_USERS = [
     {"username": "impress", "email": "impress@impress.world", "language": "en-us"},
-    {"username": "user-e2e-webkit", "email": "user@webkit.test", "language": "en-us"},
-    {"username": "user-e2e-firefox", "email": "user@firefox.test", "language": "en-us"},
+    {
+        "username": "user-e2e-webkit",
+        "email": "user.test@webkit.test",
+        "language": "en-us",
+    },
+    {
+        "username": "user-e2e-firefox",
+        "email": "user.test@firefox.test",
+        "language": "en-us",
+    },
     {
         "username": "user-e2e-chromium",
-        "email": "user@chromium.test",
+        "email": "user.test@chromium.test",
         "language": "en-us",
     },
 ]

src/backend/demo/management/commands/create_demo.py

@@ -119,8 +119,8 @@ def create_demo(stdout):
             first_name = random.choice(first_names)
             queue.push(
                 models.User(
-                    admin_email=f"user{i:d}@example.com",
-                    email=f"user{i:d}@example.com",
+                    admin_email=f"user.test{i:d}@example.com",
+                    email=f"user.test{i:d}@example.com",
                     password="!",
                     is_superuser=False,
                     is_active=True,

src/backend/demo/tests/test_commands_create_demo.py

@@ -33,9 +33,9 @@ def test_commands_create_demo():
     # assert dev users have doc accesses
     user = models.User.objects.get(email="impress@impress.world")
     assert models.DocumentAccess.objects.filter(user=user).exists()
-    user = models.User.objects.get(email="user@webkit.test")
+    user = models.User.objects.get(email="user.test@webkit.test")
     assert models.DocumentAccess.objects.filter(user=user).exists()
-    user = models.User.objects.get(email="user@firefox.test")
+    user = models.User.objects.get(email="user.test@firefox.test")
     assert models.DocumentAccess.objects.filter(user=user).exists()
-    user = models.User.objects.get(email="user@chromium.test")
+    user = models.User.objects.get(email="user.test@chromium.test")
     assert models.DocumentAccess.objects.filter(user=user).exists()

src/backend/impress/settings.py

@@ -142,7 +142,7 @@ class Base(Configuration):
     )
 
     # Document images
-    DOCUMENT_IMAGE_MAX_SIZE = values.Value(
+    DOCUMENT_IMAGE_MAX_SIZE = values.IntegerValue(
         10 * (2**20),  # 10MB
         environ_name="DOCUMENT_IMAGE_MAX_SIZE",
         environ_prefix=None,
@@ -356,6 +356,9 @@ class Base(Configuration):
         "PAGE_SIZE": 20,
         "DEFAULT_VERSIONING_CLASS": "rest_framework.versioning.URLPathVersioning",
         "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema",
+        "DEFAULT_THROTTLE_CLASSES": [
+            "lasuite.drf.throttling.MonitoredScopedRateThrottle",
+        ],
         "DEFAULT_THROTTLE_RATES": {
             "user_list_sustained": values.Value(
                 default="180/hour",
@@ -367,8 +370,46 @@ class Base(Configuration):
                 environ_name="API_USERS_LIST_THROTTLE_RATE_BURST",
                 environ_prefix=None,
             ),
+            "document": values.Value(
+                default="80/minute",
+                environ_name="API_DOCUMENT_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "document_access": values.Value(
+                default="50/minute",
+                environ_name="API_DOCUMENT_ACCESS_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "template": values.Value(
+                default="30/minute",
+                environ_name="API_TEMPLATE_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "template_access": values.Value(
+                default="30/minute",
+                environ_name="API_TEMPLATE_ACCESS_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "invitation": values.Value(
+                default="60/minute",
+                environ_name="API_INVITATION_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "document_ask_for_access": values.Value(
+                default="30/minute",
+                environ_name="API_DOCUMENT_ASK_FOR_ACCESS_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
+            "config": values.Value(
+                default="30/minute",
+                environ_name="API_CONFIG_THROTTLE_RATE",
+                environ_prefix=None,
+            ),
         },
     }
+    MONITORED_THROTTLE_FAILURE_CALLBACK = (
+        "core.api.throttling.sentry_monitoring_throttle_failure"
+    )
 
     SPECTACULAR_SETTINGS = {
         "TITLE": "Impress API",
@@ -449,7 +490,7 @@ class Base(Configuration):
         environ_prefix=None,
     )
 
-    THEME_CUSTOMIZATION_CACHE_TIMEOUT = values.Value(
+    THEME_CUSTOMIZATION_CACHE_TIMEOUT = values.IntegerValue(
         60 * 60 * 24,
         environ_name="THEME_CUSTOMIZATION_CACHE_TIMEOUT",
         environ_prefix=None,

src/backend/locale/br_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Breton\n"
 "Language: br_FR\n"
@@ -50,27 +50,36 @@ msgstr "Kuzhet"
 msgid "Favorite"
 msgstr "Sinedoù"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Ur restr nevez a zo bet krouet ganeoc'h!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "C'hwi zo bet disklaeriet perc'henn ur restr nevez:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "Ar vaezienn-mañ a zo rekis."
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Korf"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Doare korf"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Stumm"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "eilenn {title}"
@@ -225,8 +234,8 @@ msgstr "implijer"
 msgid "users"
 msgstr "implijerien"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "titl"
 
@@ -242,174 +251,174 @@ msgstr "Restr"
 msgid "Documents"
 msgstr "Restroù"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Restr hep titl"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} en deus rannet ur restr ganeoc'h!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} en deus pedet ac'hanoc'h gant ar rol \"{role}\" war ar restr da-heul:"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} en deus rannet ur restr ganeoc'h: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Roud liamm ar restr/an implijer"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Roudoù liamm ar restr/an implijer"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Ur roud liamm a zo dija evit an restr/an implijer."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Restr muiañ-karet"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Restroù muiañ-karet"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Ar restr-mañ a zo ur restr muiañ karet gant an implijer-mañ."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Liamm restr/implijer"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Liammoù restr/implijer"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "An implijer-mañ a zo dija er restr-mañ."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Ar skipailh-mañ a zo dija en restr-mañ."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "An implijer pe ar skipailh a rank bezañ termenet, ket an daou avat."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr "Goulenn tizhout ar restr"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr "Goulennoù tizhout ar restr"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr "An implijer en deus goulennet tizhout ar restr-mañ."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "{name} en defe c'hoant da dizhout ar restr-mañ!"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr "{name} en defe c'hoant da dizhout ar restr da-heul:"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr "{name} en defe c'hoant da dizhout ar restr: {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "deskrivadur"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "kod"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "publik"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "M'eo foran ar patrom-mañ hag implijus gant n'eus forzh piv."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Patrom"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Patromoù"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Liamm patrom/implijer"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Liammoù patrom/implijer"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "An implijer-mañ a zo dija er patrom-mañ."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Ar skipailh-mañ a zo dija er patrom-mañ."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "postel"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Pedadenn d'ur restr"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Pedadennoù d'ur restr"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Ar postel-mañ a zo liammet ouzh un implijer enskrivet."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo ar postel"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Digeriñ"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, hoc'h ostilh nevez ret-holl evit aozañ, rannañ ha kenlabourat war ar restr e skipailh. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/de_DE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: German\n"
 "Language: de_DE\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Favorit"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Ein neues Dokument wurde in Ihrem Namen erstellt!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Sie sind Besitzer eines neuen Dokuments:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Inhalt"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Typ"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "Kopie von {title}"
@@ -225,8 +234,8 @@ msgstr "Benutzer"
 msgid "users"
 msgstr "Benutzer"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "Titel"
 
@@ -242,174 +251,174 @@ msgstr "Dokument"
 msgid "Documents"
 msgstr "Dokumente"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Unbenanntes Dokument"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} hat Sie mit der Rolle \"{role}\" zu folgendem Dokument eingeladen:"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} hat ein Dokument mit Ihnen geteilt: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Dokument/Benutzer Linkverfolgung"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Für dieses Dokument/ diesen Benutzer ist bereits eine Linkverfolgung vorhanden."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Dokumentenfavorit"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Dokumentfavoriten"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dieses Dokument ist bereits durch den gleichen Benutzer favorisiert worden."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Dokument/Benutzerbeziehung"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Dokument/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Dieser Benutzer befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Dieses Team befindet sich bereits in diesem Dokument."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Benutzer oder Team müssen gesetzt werden, nicht beides."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "Beschreibung"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "Code"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "öffentlich"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Ob diese Vorlage für jedermann öffentlich ist."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Vorlage"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Vorlagen"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Vorlage/Benutzer-Beziehung"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Vorlage/Benutzerbeziehungen"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Dieser Benutzer ist bereits in dieser Vorlage."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Dieses Team ist bereits in diesem Template."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "E-Mail-Adresse"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Einladung zum Dokument"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Dokumenteinladungen"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Diese E-Mail ist bereits einem registrierten Benutzer zugeordnet."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo-E-Mail"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Öffnen"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, Ihr neues unentbehrliches Werkzeug für die Organisation, den Austausch und die Zusammenarbeit in Ihren Dokumenten als Team. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/en_US/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: English\n"
 "Language: en_US\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr ""
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +234,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr ""
 
@@ -242,174 +251,174 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr ""
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr ""
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr ""
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/es_ES/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Spanish\n"
 "Language: es_ES\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Favorito"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "¡Un nuevo documento se ha creado por ti!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Se le ha concedido la propiedad de un nuevo documento :"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Cuerpo"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Tipo de Cuerpo"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copia de {title}"
@@ -163,7 +172,7 @@ msgstr "sub (UUID)"
 
 #: build/lib/core/models.py:142 core/models.py:142
 msgid "Required. 255 characters or fewer. ASCII characters only."
-msgstr ""
+msgstr "Obligatorio. 255 caracteres o menos. Solo caracteres ASCII."
 
 #: build/lib/core/models.py:150 core/models.py:150
 msgid "full name"
@@ -225,8 +234,8 @@ msgstr "usuario"
 msgid "users"
 msgstr "usuarios"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "título"
 
@@ -242,174 +251,174 @@ msgstr "Documento"
 msgid "Documents"
 msgstr "Documentos"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Documento sin título"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "¡{name} ha compartido un documento contigo!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "Te ha invitado {name} al siguiente documento con el rol \"{role}\" :"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} ha compartido un documento contigo: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Traza del enlace de documento/usuario"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Trazas del enlace de documento/usuario"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Ya existe una traza de enlace para este documento/usuario."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Documento favorito"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Documentos favoritos"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Este documento ya ha sido marcado como favorito por el usuario."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Relación documento/usuario"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Relaciones documento/usuario"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Este usuario ya forma parte del documento."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Este equipo ya forma parte del documento."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Debe establecerse un usuario o un equipo, no ambos."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
-msgstr ""
+msgstr "Solicitud de acceso"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
-msgstr ""
+msgstr "Solicitud de accesos"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr "Este usuario ya ha solicitado acceso a este documento."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "¡{name} desea acceder a un documento!"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
-msgstr ""
+msgstr "{name} desea acceso al siguiente documento:"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
-msgstr ""
+msgstr "{name} está pidiendo acceso al documento: {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "descripción"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "código"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "público"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Si esta plantilla es pública para que cualquiera la utilice."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Plantilla"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Plantillas"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Relación plantilla/usuario"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Relaciones plantilla/usuario"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Este usuario ya forma parte de la plantilla."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Este equipo ya se encuentra en esta plantilla."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "dirección de correo electrónico"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Invitación al documento"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Invitaciones a documentos"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Este correo electrónico está asociado a un usuario registrado."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo de correo electrónico"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Abrir"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr "Docs, su nueva herramienta esencial para organizar, compartir y colaborar en sus documentos como equipo."
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/fr_FR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 11:45\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: French\n"
 "Language: fr_FR\n"
@@ -50,27 +50,36 @@ msgstr "Masqué"
 msgid "Favorite"
 msgstr "Favoris"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Un nouveau document a été créé pour vous !"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Vous avez été déclaré propriétaire d'un nouveau document :"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "Ce champ est obligatoire."
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr "La portée du lien '%(link_reach)s' n'est pas autorisée en fonction de la configuration du document parent."
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Corps"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Type de corps"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copie de {title}"
@@ -225,8 +234,8 @@ msgstr "utilisateur"
 msgid "users"
 msgstr "utilisateurs"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "titre"
 
@@ -242,174 +251,174 @@ msgstr "Document"
 msgid "Documents"
 msgstr "Documents"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Document sans titre"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} a partagé un document avec vous!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vous a invité avec le rôle \"{role}\" sur le document suivant :"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} a partagé un document avec vous : {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Trace du lien document/utilisateur"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Traces du lien document/utilisateur"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Une trace de lien existe déjà pour ce document/utilisateur."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Document favori"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Documents favoris"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Ce document est déjà un favori de cet utilisateur."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Relation document/utilisateur"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Relations document/utilisateur"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Cet utilisateur est déjà dans ce document."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Cette équipe est déjà dans ce document."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "L'utilisateur ou l'équipe doivent être définis, pas les deux."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr "Demande d'accès au document"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr "Demande d'accès au document"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr "Cet utilisateur a déjà demandé l'accès à ce document."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "{name} souhaiterait accéder au document suivant !"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr "{name} souhaiterait accéder au document suivant :"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr "{name} demande l'accès au document : {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "description"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "CSS"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "public"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Si ce modèle est public, utilisable par n'importe qui."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Modèle"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Modèles"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Relation modèle/utilisateur"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Relations modèle/utilisateur"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Cet utilisateur est déjà dans ce modèle."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Cette équipe est déjà modèle."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "adresse e-mail"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Invitation à un document"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Invitations à un document"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Cette adresse email est déjà associée à un utilisateur inscrit."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo de l'e-mail"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Ouvrir"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, votre nouvel outil incontournable pour organiser, partager et collaborer sur vos documents en équipe. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/it_IT/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Italian\n"
 "Language: it_IT\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Preferiti"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Un nuovo documento è stato creato a tuo nome!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Sei ora proprietario di un nuovo documento:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Corpo"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "copia di {title}"
@@ -225,8 +234,8 @@ msgstr "utente"
 msgid "users"
 msgstr "utenti"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "titolo"
 
@@ -242,174 +251,174 @@ msgstr "Documento"
 msgid "Documents"
 msgstr "Documenti"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Documento senza titolo"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} ha condiviso un documento con te!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} ti ha invitato con il ruolo \"{role}\" nel seguente documento:"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} ha condiviso un documento con te: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Documento preferito"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Documenti preferiti"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Questo utente è già presente in questo documento."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Questo team è già presente in questo documento."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "descrizione"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "pubblico"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Indica se questo modello è pubblico per chiunque."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Modello"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Modelli"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Questo utente è già in questo modello."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Questo team è già in questo modello."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "indirizzo e-mail"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Invito al documento"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Inviti al documento"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Questa email è già associata a un utente registrato."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo e-mail"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Apri"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr ""
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/nl_NL/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Dutch\n"
 "Language: nl_NL\n"
@@ -44,33 +44,42 @@ msgstr "Ik ben Eigenaar"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
 msgid "Masked"
-msgstr ""
+msgstr "Gemaskeerd"
 
 #: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "Favoriete"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Een nieuw document was gecreëerd voor u!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "U heeft eigenaarschap van een nieuw document:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "Dit veld is verplicht."
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr "Link bereik '%(link_reach)s' is niet toegestaan op basis van bovenliggende documentconfiguratie."
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Text"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Text type"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Formaat"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "kopie van {title}"
@@ -163,7 +172,7 @@ msgstr "id"
 
 #: build/lib/core/models.py:142 core/models.py:142
 msgid "Required. 255 characters or fewer. ASCII characters only."
-msgstr ""
+msgstr "Vereist. Minder dan 255 ASCII tekens."
 
 #: build/lib/core/models.py:150 core/models.py:150
 msgid "full name"
@@ -225,8 +234,8 @@ msgstr "gebruiker"
 msgid "users"
 msgstr "gebruikers"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "titel"
 
@@ -242,174 +251,174 @@ msgstr "Document"
 msgid "Documents"
 msgstr "Documenten"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Naamloos Document"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} heeft een document met gedeeld!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} heeft u uitgenodigd met de rol \"{role}\" op het volgende document:"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} heeft een document met u gedeeld: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Document/gebruiker url"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Document/gebruiker url"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Een url bestaat al voor dit document/deze gebruiker."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Document favoriet"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Document favorieten"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Dit document is al in gebruik als favoriete door dezelfde gebruiker."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Document/gebruiker relatie"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Document/gebruiker relaties"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "De gebruiker is al in dit document."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Het team is al in dit document."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Een gebruiker of team moet gekozen worden, maar niet beide."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
-msgstr ""
+msgstr "Document verzoekt om toegang"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
-msgstr ""
+msgstr "Document verzoekt om toegangen"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
-msgstr ""
+msgstr "Deze gebruiker heeft al om toegang tot dit document gevraagd."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
-msgstr ""
+msgstr "{name} wenst toegang tot een document!"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
-msgstr ""
+msgstr "{name} wenst toegang tot het volgende document:"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
-msgstr ""
+msgstr "{name} vraagt toegang tot het document: {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "omschrijving"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "code"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "publiek"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Of dit template als publiek is en door iedereen te gebruiken is."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Template"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Templates"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Template/gebruiker relatie"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Template/gebruiker relaties"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "De gebruiker bestaat al in dit template."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Het team bestaat al in dit template."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "email adres"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Document uitnodiging"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Document uitnodigingen"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Deze email is al geassocieerd met een geregistreerde gebruiker."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logo email"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Open"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, jouw nieuwe essentiële tool voor het organiseren, delen en collaboreren van documenten als team. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/pt_PT/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Portuguese\n"
 "Language: pt_PT\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Favorito"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Um novo documento foi criado em seu nome!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "A propriedade de um novo documento foi concedida a você:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Corpo"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Tipo de corpo"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Formato"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "cópia de {title}"
@@ -225,8 +234,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr ""
 
@@ -242,174 +251,174 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr ""
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr ""
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr ""
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/ru_RU/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Russian\n"
 "Language: ru_RU\n"
@@ -50,27 +50,36 @@ msgstr "Скрытый"
 msgid "Favorite"
 msgstr "Избранное"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Новый документ был создан от вашего имени!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Вы назначены владельцем для нового документа:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "Это поле обязательное."
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr "Доступ по ссылке '%(link_reach)s' запрещён в соответствии с настройками родительского документа."
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Текст сообщения"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Тип сообщения"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Формат"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "копия {title}"
@@ -225,8 +234,8 @@ msgstr "пользователь"
 msgid "users"
 msgstr "пользователи"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "заголовок"
 
@@ -242,174 +251,174 @@ msgstr "Документ"
 msgid "Documents"
 msgstr "Документы"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Безымянный документ"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} делится с вами документом!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} приглашает вас присоединиться к следующему документу с ролью \"{role}\":"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} делится с вами документом: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Трассировка связи документ/пользователь"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Трассировка связей документ/пользователь"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Для этого документа/пользователя уже существует трассировка ссылки."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Избранный документ"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Избранные документы"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Этот документ уже помечен как избранный для этого пользователя."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Отношение документ/пользователь"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Отношения документ/пользователь"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Этот пользователь уже имеет доступ к этому документу."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Эта команда уже имеет доступ к этому документу."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Может быть выбран либо пользователь, либо команда, но не оба варианта сразу."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr "Документ запрашивает доступ"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr "Документ запрашивает доступы"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr "Этот пользователь уже запросил доступ к этому документу."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "{name} хочет получить доступ к документу!"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr "{name} хочет получить доступ к следующему документу:"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr "{name} запрашивает доступ к документу: {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "описание"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "код"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "доступно всем"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Этот шаблон доступен всем пользователям."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Шаблон"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Шаблоны"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Отношение шаблон/пользователь"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Отношения шаблон/пользователь"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Этот пользователь уже указан в этом шаблоне."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Эта команда уже указана в этом шаблоне."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "адрес электронной почты"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Приглашение для документа"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Приглашения для документов"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Этот адрес уже связан с зарегистрированным пользователем."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Логотип email"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Открыть"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, ваш новый инструмент для организации и совместного использования документов в вашей команде. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/sl_SI/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Slovenian\n"
 "Language: sl_SI\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Priljubljena"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Nov dokument je bil ustvarjen v vašem imenu!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Dodeljeno vam je bilo lastništvo nad novim dokumentom:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Telo"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Vrsta telesa"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Oblika"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +234,8 @@ msgstr "uporabnik"
 msgid "users"
 msgstr "uporabniki"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "naslov"
 
@@ -242,174 +251,174 @@ msgstr "Dokument"
 msgid "Documents"
 msgstr "Dokumenti"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Dokument brez naslova"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} je delil dokument z vami!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} vas je povabil z vlogo \"{role}\" na naslednjem dokumentu:"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} je delil dokument z vami: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Dokument/sled povezave uporabnika"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Sledi povezav dokumenta/uporabnika"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Za ta dokument/uporabnika že obstaja sled povezave."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Priljubljeni dokument"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Priljubljeni dokumenti"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Ta dokument je že ciljno usmerjen s priljubljenim primerkom relacije za istega uporabnika."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Odnos dokument/uporabnik"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Odnosi dokument/uporabnik"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Ta uporabnik je že v tem dokumentu."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Ta ekipa je že v tem dokumentu."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Nastaviti je treba bodisi uporabnika ali ekipo, a ne obojega."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "opis"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "koda"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "javno"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Ali je ta predloga javna za uporabo."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Predloga"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Predloge"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Odnos predloga/uporabnik"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Odnosi med predlogo in uporabnikom"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Ta uporabnik je že v tej predlogi."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Ta ekipa je že v tej predlogi."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "elektronski naslov"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Vabilo na dokument"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Vabila na dokument"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Ta e-poštni naslov je že povezan z registriranim uporabnikom."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "E-pošta z logotipom"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Odpri"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Dokumenti, vaše novo bistveno orodje za organiziranje, skupno rabo in skupinsko sodelovanje pri dokumentih. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/sv_SE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Swedish\n"
 "Language: sv_SE\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr "Favoriter"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Ett nytt dokument skapades åt dig!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Du har beviljats äganderätt till ett nytt dokument:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Format"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +234,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr ""
 
@@ -242,174 +251,174 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "e-postadress"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Bjud in dokument"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Inbjudningar dokument"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Denna e-postadress är redan associerad med en registrerad användare."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Logotyp e-post"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Öppna"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr ""
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/tr_TR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Turkish\n"
 "Language: tr_TR\n"
@@ -50,27 +50,36 @@ msgstr ""
 msgid "Favorite"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr ""
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr ""
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr ""
@@ -225,8 +234,8 @@ msgstr ""
 msgid "users"
 msgstr ""
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr ""
 
@@ -242,174 +251,174 @@ msgstr ""
 msgid "Documents"
 msgstr ""
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr ""
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr ""
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr ""
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr ""
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr ""
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr ""
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr ""
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr ""
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr ""
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr ""
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr ""
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr ""
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr ""
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr ""
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr ""
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr ""
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr ""
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr ""
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr ""
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr ""
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr ""
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr ""
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr ""
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr ""
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr ""
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr ""
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr ""
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr ""
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr ""
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr ""
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr ""
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr ""
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr ""
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/uk_UA/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Ukrainian\n"
 "Language: uk_UA\n"
@@ -50,27 +50,36 @@ msgstr "Приховано"
 msgid "Favorite"
 msgstr "Обране"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "Новий документ був створений від вашого імені!"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "Ви тепер є власником нового документа:"
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "Це поле є обов’язковим."
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr "Доступ до посилання '%(link_reach)s' заборонено на основі конфігурації батьківського документа."
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "Вміст"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "Тип вмісту"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "Формат"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "копія {title}"
@@ -225,8 +234,8 @@ msgstr "користувач"
 msgid "users"
 msgstr "користувачі"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "заголовок"
 
@@ -242,174 +251,174 @@ msgstr "Документ"
 msgid "Documents"
 msgstr "Документи"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "Документ без назви"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} ділиться з вами документом!"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} запрошує вас для роботи з документом із роллю \"{role}\":"
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} ділиться з вами документом: {title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "Трасування посилання Документ/користувач"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "Трасування посилань Документ/користувач"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "Відстеження вже існуючих посилань для цього документа/користувача."
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "Обраний документ"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "Обрані документи"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "Цей документ вже вказаний як обраний для одного користувача."
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "Відносини документ/користувач"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "Відносини документ/користувач"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "Цей користувач вже має доступ до цього документу."
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "Ця команда вже має доступ до цього документа."
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "Вкажіть користувача або команду, а не обох."
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
 msgstr "Запит доступу до документа"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
 msgstr "Запит доступу для документа"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
 msgstr "Цей користувач вже попросив доступ до цього документа."
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
 msgstr "{name} хоче отримати доступ до документа!"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
 msgstr "{name} бажає отримати доступ до наступного документа:"
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
 msgstr "{name} запитує доступ до документа: {title}"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "опис"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "код"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "публічне"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "Чи є цей шаблон публічним для будь-кого користувача."
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "Шаблон"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "Шаблони"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "Відношення шаблон/користувач"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "Відношення шаблон/користувач"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "Цей користувач вже має доступ до цього шаблону."
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "Ця команда вже має доступ до цього шаблону."
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "електронна адреса"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "Запрошення до редагування документа"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "Запрошення до редагування документів"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "Ця електронна пошта вже пов'язана з зареєстрованим користувачем."
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "Логотип пошти"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "Відкрити"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs, ваш новий важливий інструмент для організації, обміну та командної співпраці над вашими документами. "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/locale/zh_CN/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: lasuite-docs\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-01 21:01+0000\n"
-"PO-Revision-Date: 2025-09-04 10:03\n"
+"POT-Creation-Date: 2025-10-14 07:19+0000\n"
+"PO-Revision-Date: 2025-10-14 13:09\n"
 "Last-Translator: \n"
 "Language-Team: Chinese Simplified\n"
 "Language: zh_CN\n"
@@ -44,33 +44,42 @@ msgstr "创建者是我"
 
 #: build/lib/core/api/filters.py:64 core/api/filters.py:64
 msgid "Masked"
-msgstr ""
+msgstr "已屏蔽"
 
 #: build/lib/core/api/filters.py:67 core/api/filters.py:67
 msgid "Favorite"
 msgstr "收藏"
 
-#: build/lib/core/api/serializers.py:487 core/api/serializers.py:487
+#: build/lib/core/api/serializers.py:496 core/api/serializers.py:496
 msgid "A new document was created on your behalf!"
 msgstr "已为您创建了一份新文档！"
 
-#: build/lib/core/api/serializers.py:491 core/api/serializers.py:491
+#: build/lib/core/api/serializers.py:500 core/api/serializers.py:500
 msgid "You have been granted ownership of a new document:"
 msgstr "您已被授予新文档的所有权："
 
-#: build/lib/core/api/serializers.py:628 core/api/serializers.py:628
+#: build/lib/core/api/serializers.py:536 core/api/serializers.py:536
+msgid "This field is required."
+msgstr "必填字段。"
+
+#: build/lib/core/api/serializers.py:547 core/api/serializers.py:547
+#, python-format
+msgid "Link reach '%(link_reach)s' is not allowed based on parent document configuration."
+msgstr ""
+
+#: build/lib/core/api/serializers.py:693 core/api/serializers.py:693
 msgid "Body"
 msgstr "正文"
 
-#: build/lib/core/api/serializers.py:631 core/api/serializers.py:631
+#: build/lib/core/api/serializers.py:696 core/api/serializers.py:696
 msgid "Body type"
 msgstr "正文类型"
 
-#: build/lib/core/api/serializers.py:637 core/api/serializers.py:637
+#: build/lib/core/api/serializers.py:702 core/api/serializers.py:702
 msgid "Format"
 msgstr "格式"
 
-#: build/lib/core/api/viewsets.py:960 core/api/viewsets.py:960
+#: build/lib/core/api/viewsets.py:983 core/api/viewsets.py:983
 #, python-brace-format
 msgid "copy of {title}"
 msgstr "{title} 的副本"
@@ -163,7 +172,7 @@ msgstr "sub"
 
 #: build/lib/core/models.py:142 core/models.py:142
 msgid "Required. 255 characters or fewer. ASCII characters only."
-msgstr ""
+msgstr "必填项。限255个字符以内。仅支持ASCII字符。"
 
 #: build/lib/core/models.py:150 core/models.py:150
 msgid "full name"
@@ -225,8 +234,8 @@ msgstr "用户"
 msgid "users"
 msgstr "个用户"
 
-#: build/lib/core/models.py:359 build/lib/core/models.py:1280
-#: core/models.py:359 core/models.py:1280
+#: build/lib/core/models.py:359 build/lib/core/models.py:1282
+#: core/models.py:359 core/models.py:1282
 msgid "title"
 msgstr "标题"
 
@@ -242,174 +251,174 @@ msgstr "文档"
 msgid "Documents"
 msgstr "个文档"
 
-#: build/lib/core/models.py:422 build/lib/core/models.py:818 core/models.py:422
-#: core/models.py:818
+#: build/lib/core/models.py:422 build/lib/core/models.py:820 core/models.py:422
+#: core/models.py:820
 msgid "Untitled Document"
 msgstr "未命名文档"
 
-#: build/lib/core/models.py:853 core/models.py:853
+#: build/lib/core/models.py:855 core/models.py:855
 #, python-brace-format
 msgid "{name} shared a document with you!"
 msgstr "{name} 与您共享了一个文档！"
 
-#: build/lib/core/models.py:857 core/models.py:857
+#: build/lib/core/models.py:859 core/models.py:859
 #, python-brace-format
 msgid "{name} invited you with the role \"{role}\" on the following document:"
 msgstr "{name} 邀请您以“{role}”角色访问以下文档："
 
-#: build/lib/core/models.py:863 core/models.py:863
+#: build/lib/core/models.py:865 core/models.py:865
 #, python-brace-format
 msgid "{name} shared a document with you: {title}"
 msgstr "{name} 与您共享了一个文档：{title}"
 
-#: build/lib/core/models.py:963 core/models.py:963
+#: build/lib/core/models.py:965 core/models.py:965
 msgid "Document/user link trace"
 msgstr "文档/用户链接跟踪"
 
-#: build/lib/core/models.py:964 core/models.py:964
+#: build/lib/core/models.py:966 core/models.py:966
 msgid "Document/user link traces"
 msgstr "个文档/用户链接跟踪"
 
-#: build/lib/core/models.py:970 core/models.py:970
+#: build/lib/core/models.py:972 core/models.py:972
 msgid "A link trace already exists for this document/user."
 msgstr "此文档/用户的链接跟踪已存在。"
 
-#: build/lib/core/models.py:993 core/models.py:993
+#: build/lib/core/models.py:995 core/models.py:995
 msgid "Document favorite"
 msgstr "文档收藏"
 
-#: build/lib/core/models.py:994 core/models.py:994
+#: build/lib/core/models.py:996 core/models.py:996
 msgid "Document favorites"
 msgstr "文档收藏夹"
 
-#: build/lib/core/models.py:1000 core/models.py:1000
+#: build/lib/core/models.py:1002 core/models.py:1002
 msgid "This document is already targeted by a favorite relation instance for the same user."
 msgstr "该文档已被同一用户的收藏关系实例关联。"
 
-#: build/lib/core/models.py:1022 core/models.py:1022
+#: build/lib/core/models.py:1024 core/models.py:1024
 msgid "Document/user relation"
 msgstr "文档/用户关系"
 
-#: build/lib/core/models.py:1023 core/models.py:1023
+#: build/lib/core/models.py:1025 core/models.py:1025
 msgid "Document/user relations"
 msgstr "文档/用户关系集"
 
-#: build/lib/core/models.py:1029 core/models.py:1029
+#: build/lib/core/models.py:1031 core/models.py:1031
 msgid "This user is already in this document."
 msgstr "该用户已在此文档中。"
 
-#: build/lib/core/models.py:1035 core/models.py:1035
+#: build/lib/core/models.py:1037 core/models.py:1037
 msgid "This team is already in this document."
 msgstr "该团队已在此文档中。"
 
-#: build/lib/core/models.py:1041 build/lib/core/models.py:1366
-#: core/models.py:1041 core/models.py:1366
+#: build/lib/core/models.py:1043 build/lib/core/models.py:1368
+#: core/models.py:1043 core/models.py:1368
 msgid "Either user or team must be set, not both."
 msgstr "必须设置用户或团队之一，不能同时设置两者。"
 
-#: build/lib/core/models.py:1187 core/models.py:1187
+#: build/lib/core/models.py:1189 core/models.py:1189
 msgid "Document ask for access"
-msgstr ""
+msgstr "文档需要访问权限"
 
-#: build/lib/core/models.py:1188 core/models.py:1188
+#: build/lib/core/models.py:1190 core/models.py:1190
 msgid "Document ask for accesses"
-msgstr ""
+msgstr "文档需要访问权限"
 
-#: build/lib/core/models.py:1194 core/models.py:1194
+#: build/lib/core/models.py:1196 core/models.py:1196
 msgid "This user has already asked for access to this document."
-msgstr ""
+msgstr "用户已申请该文档的访问权限。"
 
-#: build/lib/core/models.py:1259 core/models.py:1259
+#: build/lib/core/models.py:1261 core/models.py:1261
 #, python-brace-format
 msgid "{name} would like access to a document!"
-msgstr ""
+msgstr "{name} 申请访问文档！"
 
-#: build/lib/core/models.py:1263 core/models.py:1263
+#: build/lib/core/models.py:1265 core/models.py:1265
 #, python-brace-format
 msgid "{name} would like access to the following document:"
-msgstr ""
+msgstr "{name} 申请访问以下文档："
 
-#: build/lib/core/models.py:1269 core/models.py:1269
+#: build/lib/core/models.py:1271 core/models.py:1271
 #, python-brace-format
 msgid "{name} is asking for access to the document: {title}"
-msgstr ""
+msgstr "{name}申请文档：{title}的访问权限"
 
-#: build/lib/core/models.py:1281 core/models.py:1281
+#: build/lib/core/models.py:1283 core/models.py:1283
 msgid "description"
 msgstr "说明"
 
-#: build/lib/core/models.py:1282 core/models.py:1282
+#: build/lib/core/models.py:1284 core/models.py:1284
 msgid "code"
 msgstr "代码"
 
-#: build/lib/core/models.py:1283 core/models.py:1283
+#: build/lib/core/models.py:1285 core/models.py:1285
 msgid "css"
 msgstr "css"
 
-#: build/lib/core/models.py:1285 core/models.py:1285
+#: build/lib/core/models.py:1287 core/models.py:1287
 msgid "public"
 msgstr "公开"
 
-#: build/lib/core/models.py:1287 core/models.py:1287
+#: build/lib/core/models.py:1289 core/models.py:1289
 msgid "Whether this template is public for anyone to use."
 msgstr "该模板是否公开供任何人使用。"
 
-#: build/lib/core/models.py:1293 core/models.py:1293
+#: build/lib/core/models.py:1295 core/models.py:1295
 msgid "Template"
 msgstr "模板"
 
-#: build/lib/core/models.py:1294 core/models.py:1294
+#: build/lib/core/models.py:1296 core/models.py:1296
 msgid "Templates"
 msgstr "模板"
 
-#: build/lib/core/models.py:1347 core/models.py:1347
+#: build/lib/core/models.py:1349 core/models.py:1349
 msgid "Template/user relation"
 msgstr "模板/用户关系"
 
-#: build/lib/core/models.py:1348 core/models.py:1348
+#: build/lib/core/models.py:1350 core/models.py:1350
 msgid "Template/user relations"
 msgstr "模板/用户关系集"
 
-#: build/lib/core/models.py:1354 core/models.py:1354
+#: build/lib/core/models.py:1356 core/models.py:1356
 msgid "This user is already in this template."
 msgstr "该用户已在此模板中。"
 
-#: build/lib/core/models.py:1360 core/models.py:1360
+#: build/lib/core/models.py:1362 core/models.py:1362
 msgid "This team is already in this template."
 msgstr "该团队已在此模板中。"
 
-#: build/lib/core/models.py:1437 core/models.py:1437
+#: build/lib/core/models.py:1439 core/models.py:1439
 msgid "email address"
 msgstr "电子邮件地址"
 
-#: build/lib/core/models.py:1456 core/models.py:1456
+#: build/lib/core/models.py:1458 core/models.py:1458
 msgid "Document invitation"
 msgstr "文档邀请"
 
-#: build/lib/core/models.py:1457 core/models.py:1457
+#: build/lib/core/models.py:1459 core/models.py:1459
 msgid "Document invitations"
 msgstr "文档邀请"
 
-#: build/lib/core/models.py:1477 core/models.py:1477
+#: build/lib/core/models.py:1479 core/models.py:1479
 msgid "This email is already associated to a registered user."
 msgstr "此电子邮件已经与现有注册用户关联。"
 
-#: core/templates/mail/html/template.html:162
+#: core/templates/mail/html/template.html:153
 #: core/templates/mail/text/template.txt:3
 msgid "Logo email"
 msgstr "徽标邮件"
 
-#: core/templates/mail/html/template.html:209
+#: core/templates/mail/html/template.html:200
 #: core/templates/mail/text/template.txt:10
 msgid "Open"
 msgstr "打开"
 
-#: core/templates/mail/html/template.html:226
+#: core/templates/mail/html/template.html:217
 #: core/templates/mail/text/template.txt:14
 msgid " Docs, your new essential tool for organizing, sharing and collaborating on your documents as a team. "
 msgstr " Docs——您的全新必备工具，帮助团队组织、共享和协作处理文档。 "
 
-#: core/templates/mail/html/template.html:233
+#: core/templates/mail/html/template.html:224
 #: core/templates/mail/text/template.txt:16
 #, python-format
 msgid " Brought to you by %(brandname)s "

src/backend/pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "impress"
-version = "3.6.0"
+version = "3.8.2"
 authors = [{ "name" = "DINUM", "email" = "dev@mail.numerique.gouv.fr" }]
 classifiers = [
     "Development Status :: 5 - Production/Stable",
@@ -34,12 +34,12 @@ dependencies = [
     "django-countries==7.6.1",
     "django-csp==4.0",
     "django-filter==25.1",
-    "django-lasuite[all]==0.0.11",
+    "django-lasuite[all]==0.0.14",
     "django-parler==2.3",
     "django-redis==6.0.0",
     "django-storages[s3]==1.14.6",
     "django-timezone-field>=5.1",
-    "django==5.2.4",
+    "django==5.2.7",
     "django-treebeard==4.7.1",
     "djangorestframework==3.16.0",
     "drf_spectacular==0.28.0",

src/frontend/Dockerfile

@@ -10,13 +10,13 @@ WORKDIR /home/frontend/
 COPY ./src/frontend/package.json ./package.json
 COPY ./src/frontend/yarn.lock ./yarn.lock
 COPY ./src/frontend/apps/impress/package.json ./apps/impress/package.json
-COPY ./src/frontend/packages/eslint-config-impress/package.json ./packages/eslint-config-impress/package.json
+COPY ./src/frontend/packages/eslint-plugin-docs/package.json ./packages/eslint-plugin-docs/package.json
 
 RUN yarn install --frozen-lockfile
 
 COPY .dockerignore ./.dockerignore
 COPY ./src/frontend/.prettierrc.js ./.prettierrc.js
-COPY ./src/frontend/packages/eslint-config-impress ./packages/eslint-config-impress
+COPY ./src/frontend/packages/eslint-plugin-docs ./packages/eslint-plugin-docs
 COPY ./src/frontend/apps/impress ./apps/impress
 
 ### ---- Front-end builder image ----
@@ -50,7 +50,13 @@ ENV NEXT_PUBLIC_PUBLISH_AS_MIT=${PUBLISH_AS_MIT}
 RUN yarn build
 
 # ---- Front-end image ----
-FROM nginxinc/nginx-unprivileged:alpine3.21 AS frontend-production
+FROM nginxinc/nginx-unprivileged:alpine3.22 AS frontend-production
+
+# Upgrade system packages to install security updates
+USER root
+RUN apk update && \
+  apk upgrade && \
+  rm -rf /var/cache/apk/*
 
 # Un-privileged user running the application
 ARG DOCKER_USER

src/frontend/apps/e2e/.eslintrc.js

@@ -1,9 +0,0 @@
-module.exports = {
-  root: true,
-  extends: ['impress/playwright'],
-  parserOptions: {
-    tsconfigRootDir: __dirname,
-    project: ['./tsconfig.json'],
-  },
-  ignorePatterns: ['node_modules'],
-};

src/frontend/apps/e2e/__tests__/app-impress/auth.setup.ts

@@ -5,14 +5,19 @@ import { keyCloakSignIn } from './utils-common';
 const saveStorageState = async (
   browserConfig: FullProject<unknown, unknown>,
 ) => {
-  const browserName = browserConfig?.name || 'chromium';
+  if (!browserConfig) {
+    throw new Error('No browser config found');
+  }
 
-  const { storageState, ...useConfig } = browserConfig?.use;
+  const browserName = browserConfig.name || 'chromium';
+
+  const { storageState, ...useConfig } = browserConfig.use;
   const browser = await chromium.launch();
   const context = await browser.newContext(useConfig);
   const page = await context.newPage();
 
   try {
+    // eslint-disable-next-line playwright/no-networkidle
     await page.goto('/', { waitUntil: 'networkidle' });
     await page.content();
     await expect(page.getByText('Docs').first()).toBeVisible();
@@ -45,11 +50,9 @@ const saveStorageState = async (
 };
 
 async function globalSetup(config: FullConfig) {
-  /* eslint-disable @typescript-eslint/no-non-null-assertion */
   const chromeConfig = config.projects.find((p) => p.name === 'chromium')!;
   const firefoxConfig = config.projects.find((p) => p.name === 'firefox')!;
   const webkitConfig = config.projects.find((p) => p.name === 'webkit')!;
-  /* eslint-enable @typescript-eslint/no-non-null-assertion */
 
   await saveStorageState(chromeConfig);
   await saveStorageState(webkitConfig);

src/frontend/apps/e2e/__tests__/app-impress/config.spec.ts

@@ -50,7 +50,7 @@ test.describe('Config', () => {
     await expect(image).toBeVisible();
 
     // Wait for the media-check to be processed
-    // eslint-disable-next-line playwright/no-wait-for-timeout
+
     await page.waitForTimeout(1000);
 
     // Check src of image

src/frontend/apps/e2e/__tests__/app-impress/doc-create.spec.ts

@@ -45,8 +45,8 @@ test.describe('Doc Create', () => {
       })
       .click();
 
-    const input = page.getByRole('textbox', { name: 'doc title input' });
-    await expect(input).toHaveText('');
+    const input = page.getByRole('textbox', { name: 'Document title' });
+    await expect(input).toHaveText('', { timeout: 10000 });
     await expect(
       page.locator('.c__tree-view--row-content').getByText('Untitled document'),
     ).toBeVisible();
@@ -67,8 +67,8 @@ test.describe('Doc Create', () => {
       .getByText('New sub-doc')
       .click();
 
-    const input = page.getByRole('textbox', { name: 'doc title input' });
-    await expect(input).toHaveText('');
+    const input = page.getByRole('textbox', { name: 'Document title' });
+    await expect(input).toHaveText('', { timeout: 10000 });
     await expect(
       page.locator('.c__tree-view--row-content').getByText('Untitled document'),
     ).toBeVisible();
@@ -89,8 +89,8 @@ test.describe('Doc Create: Not logged', () => {
     const data = {
       title,
       content: markdown,
-      sub: `user@${browserName}.test`,
-      email: `user@${browserName}.test`,
+      sub: `user.test@${browserName}.test`,
+      email: `user.test@${browserName}.test`,
     };
 
     const newDoc = await request.post(

src/frontend/apps/e2e/__tests__/app-impress/doc-editor.spec.ts

@@ -1,6 +1,7 @@
+/* eslint-disable playwright/no-conditional-expect */
 import path from 'path';
 
-import { chromium, expect, test } from '@playwright/test';
+import { expect, test } from '@playwright/test';
 import cs from 'convert-stream';
 
 import {
@@ -10,7 +11,13 @@ import {
   overrideConfig,
   verifyDocName,
 } from './utils-common';
-import { createRootSubPage } from './utils-sub-pages';
+import { getEditor, openSuggestionMenu, writeInEditor } from './utils-editor';
+import { connectOtherUserToDoc, updateShareLink } from './utils-share';
+import {
+  createRootSubPage,
+  getTreeRow,
+  navigateToPageFromTree,
+} from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -85,8 +92,7 @@ test.describe('Doc Editor', () => {
     // Is connected
     let framesentPromise = webSocket.waitForEvent('framesent');
 
-    await page.locator('.ProseMirror.bn-editor').click();
-    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+    await writeInEditor({ page, text: 'Hello World' });
 
     let framesent = await framesentPromise;
     expect(framesent.payload).not.toBeNull();
@@ -99,7 +105,7 @@ test.describe('Doc Editor', () => {
     const wsClosePromise = webSocket.waitForEvent('close');
 
     await selectVisibility.click();
-    await page.getByLabel('Connected').click();
+    await page.getByRole('menuitem', { name: 'Connected' }).click();
 
     // Assert that the doc reconnects to the ws
     const wsClose = await wsClosePromise;
@@ -214,7 +220,6 @@ test.describe('Doc Editor', () => {
   });
 
   test('it saves the doc when we quit pages', async ({ page, browserName }) => {
-    // eslint-disable-next-line playwright/no-skipped-test
     test.skip(browserName === 'webkit', 'This test is very flaky with webkit');
 
     // Check the first doc
@@ -226,25 +231,19 @@ test.describe('Doc Editor', () => {
     await editor.fill('Hello World Doc persisted 2');
     await expect(editor.getByText('Hello World Doc persisted 2')).toBeVisible();
 
+    await page.waitForTimeout(1000);
+
     const urlDoc = page.url();
     await page.goto(urlDoc);
 
+    // Wait for editor to load
+    await expect(editor).toBeVisible();
     await expect(editor.getByText('Hello World Doc persisted 2')).toBeVisible();
   });
 
   test('it cannot edit if viewer', async ({ page }) => {
     await mockedDocument(page, {
-      abilities: {
-        destroy: false, // Means not owner
-        link_configuration: false,
-        versions_destroy: false,
-        versions_list: true,
-        versions_retrieve: true,
-        accesses_manage: false, // Means not admin
-        update: false,
-        partial_update: false, // Means not editor
-        retrieve: true,
-      },
+      user_role: 'reader',
     });
 
     await goToGridDoc(page);
@@ -253,6 +252,9 @@ test.describe('Doc Editor', () => {
     await expect(card).toBeVisible();
 
     await expect(card.getByText('Reader')).toBeVisible();
+
+    const editor = page.locator('.ProseMirror');
+    await expect(editor).toHaveAttribute('contenteditable', 'false');
   });
 
   test('it adds an image to the doc editor', async ({ page, browserName }) => {
@@ -279,7 +281,7 @@ test.describe('Doc Editor', () => {
     await expect(image).toBeVisible();
 
     // Wait for the media-check to be processed
-    // eslint-disable-next-line playwright/no-wait-for-timeout
+
     await page.waitForTimeout(1000);
 
     // Check src of image
@@ -397,8 +399,6 @@ test.describe('Doc Editor', () => {
       const editor = page.locator('.ProseMirror');
       await editor.getByText('Hello').selectText();
 
-      /* eslint-disable playwright/no-conditional-expect */
-      /* eslint-disable playwright/no-conditional-in-test */
       if (!ai_transform && !ai_translate) {
         await expect(page.getByRole('button', { name: 'AI' })).toBeHidden();
         return;
@@ -425,8 +425,6 @@ test.describe('Doc Editor', () => {
           page.getByRole('menuitem', { name: 'Language' }),
         ).toBeHidden();
       }
-      /* eslint-enable playwright/no-conditional-expect */
-      /* eslint-enable playwright/no-conditional-in-test */
     });
   });
 
@@ -467,12 +465,14 @@ test.describe('Doc Editor', () => {
     await expect(
       page.getByRole('button', {
         name: 'Download',
+        exact: true,
       }),
     ).toBeVisible();
 
     void page
       .getByRole('button', {
         name: 'Download',
+        exact: true,
       })
       .click();
 
@@ -510,10 +510,7 @@ test.describe('Doc Editor', () => {
 
     await verifyDocName(page, randomDoc);
 
-    const editor = page.locator('.ProseMirror.bn-editor');
-
-    await editor.click();
-    await editor.locator('.bn-block-outer').last().fill('/');
+    const editor = await openSuggestionMenu({ page });
     await page.getByText('Embedded file').click();
     await page.getByText('Upload file').click();
 
@@ -568,20 +565,7 @@ test.describe('Doc Editor', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    await page.getByTestId('doc-visibility').click();
-
-    await page
-      .getByRole('menuitem', {
-        name: 'Public',
-      })
-      .click();
-
-    await expect(
-      page.getByText('The document visibility has been updated.'),
-    ).toBeVisible();
-
-    await page.getByTestId('doc-access-mode').click();
-    await page.getByRole('menuitem', { name: 'Editing' }).click();
+    await updateShareLink(page, 'Public', 'Editing');
 
     // Close the modal
     await page.getByRole('button', { name: 'close' }).first().click();
@@ -605,17 +589,12 @@ test.describe('Doc Editor', () => {
      * We open another browser that will connect to the collaborative server
      * and will block the current browser to edit the doc.
      */
-    const otherBrowser = await chromium.launch({ headless: true });
-    const otherContext = await otherBrowser.newContext({
-      locale: 'en-US',
-      timezoneId: 'Europe/Paris',
-      permissions: [],
-      storageState: {
-        cookies: [],
-        origins: [],
-      },
+    const { otherPage } = await connectOtherUserToDoc({
+      browserName,
+      docUrl: urlChildDoc,
+      docTitle: childTitle,
+      withoutSignIn: true,
     });
-    const otherPage = await otherContext.newPage();
 
     const webSocketPromise = otherPage.waitForEvent(
       'websocket',
@@ -656,6 +635,11 @@ test.describe('Doc Editor', () => {
 
     await expect(editor).toHaveAttribute('contenteditable', 'false');
 
+    await expect(
+      page.getByRole('textbox', { name: 'Document title' }),
+    ).toBeHidden();
+    await expect(page.getByRole('heading', { name: childTitle })).toBeVisible();
+
     await page.goto(urlParentDoc);
 
     await verifyDocName(page, parentTitle);
@@ -672,6 +656,11 @@ test.describe('Doc Editor', () => {
 
     await expect(editor).toHaveAttribute('contenteditable', 'true');
 
+    await expect(
+      page.getByRole('textbox', { name: 'Document title' }),
+    ).toContainText(childTitle);
+    await expect(page.getByRole('heading', { name: childTitle })).toBeHidden();
+
     await expect(
       card.getByText('Others are editing. Your network prevent changes.'),
     ).toBeHidden();
@@ -680,9 +669,7 @@ test.describe('Doc Editor', () => {
   test('it checks if callout custom block', async ({ page, browserName }) => {
     await createDoc(page, 'doc-toolbar', browserName, 1);
 
-    const editor = page.locator('.ProseMirror');
-    await editor.click();
-    await page.locator('.bn-block-outer').last().fill('/');
+    await openSuggestionMenu({ page });
     await page.getByText('Add a callout block').click();
 
     const calloutBlock = page
@@ -693,25 +680,35 @@ test.describe('Doc Editor', () => {
 
     await calloutBlock.locator('.inline-content').fill('example text');
 
-    await expect(page.locator('.bn-block').first()).toHaveAttribute(
-      'data-background-color',
-      'yellow',
-    );
+    await expect(
+      page.locator('.bn-block-content[data-content-type="callout"]').first(),
+    ).toHaveAttribute('data-background-color', 'yellow');
 
     const emojiButton = calloutBlock.getByRole('button');
     await expect(emojiButton).toHaveText('💡');
     await emojiButton.click();
-    await page.locator('button[aria-label="⚠️"]').click();
-    await expect(emojiButton).toHaveText('⚠️');
+    // Group smiley
+    await expect(page.getByRole('button', { name: '🤠' })).toBeVisible();
+    // Group animals
+    await page.getByText('Animals & Nature').scrollIntoViewIfNeeded();
+    await expect(page.getByRole('button', { name: '🦆' })).toBeVisible();
+    // Group travel
+    await page.getByText('Travel & Places').scrollIntoViewIfNeeded();
+    await expect(page.getByRole('button', { name: '🚝' })).toBeVisible();
+    // Group objects
+    await page.getByText('Objects').scrollIntoViewIfNeeded();
+    await expect(page.getByRole('button', { name: '🪇' })).toBeVisible();
+    // Group symbol
+    await page.getByText('Symbols').scrollIntoViewIfNeeded();
+    await expect(page.getByRole('button', { name: '🛃' })).toBeVisible();
 
     await page.locator('.bn-side-menu > button').last().click();
     await page.locator('.mantine-Menu-dropdown > button').last().click();
     await page.locator('.bn-color-picker-dropdown > button').last().click();
 
-    await expect(page.locator('.bn-block').first()).toHaveAttribute(
-      'data-background-color',
-      'pink',
-    );
+    await expect(
+      page.locator('.bn-block-content[data-content-type="callout"]').first(),
+    ).toHaveAttribute('data-background-color', 'pink');
   });
 
   test('it checks interlink feature', async ({ page, browserName }) => {
@@ -735,7 +732,13 @@ test.describe('Doc Editor', () => {
 
     await verifyDocName(page, docChild2);
 
-    await page.locator('.bn-block-outer').last().fill('/');
+    const treeRow = await getTreeRow(page, docChild2);
+    await treeRow.locator('.--docs--doc-icon').click();
+    await page.getByRole('button', { name: '😀' }).first().click();
+
+    await navigateToPageFromTree({ page, title: docChild1 });
+
+    await openSuggestionMenu({ page });
     await page.getByText('Link a doc').first().click();
 
     const input = page.locator(
@@ -749,39 +752,142 @@ test.describe('Doc Editor', () => {
     await expect(searchContainer.getByText(docChild1)).toBeVisible();
     await expect(searchContainer.getByText(docChild2)).toBeVisible();
 
+    const searchContainerRow = searchContainer
+      .getByRole('option')
+      .filter({
+        hasText: docChild2,
+      })
+      .first();
+
+    await expect(searchContainerRow).toContainText('😀');
+    await expect(searchContainerRow.locator('svg').first()).toBeHidden();
+
     await input.pressSequentially('-child');
 
     await expect(searchContainer.getByText(docChild1)).toBeVisible();
     await expect(searchContainer.getByText(docChild2)).toBeVisible();
     await expect(searchContainer.getByText(randomDoc)).toBeHidden();
 
-    // use keydown to select the second result
+    await page.keyboard.press('ArrowDown');
     await page.keyboard.press('ArrowDown');
     await page.keyboard.press('Enter');
 
-    const interlink = page.getByRole('link', {
-      name: 'child-2',
+    // Wait for the search container to disappear, indicating selection was made
+    await expect(searchContainer).toBeHidden();
+
+    // Wait for the interlink to be created and rendered
+    const editor = await getEditor({ page });
+
+    const interlinkChild2 = editor.getByRole('button', {
+      name: docChild2,
     });
 
-    await expect(interlink).toBeVisible();
-    await interlink.click();
+    await expect(interlinkChild2).toBeVisible({ timeout: 10000 });
+    await expect(interlinkChild2).toContainText('😀');
+    await expect(interlinkChild2.locator('svg').first()).toBeHidden();
+    await interlinkChild2.click();
 
     await verifyDocName(page, docChild2);
+
+    await editor.click();
+
+    await page.keyboard.press('@');
+    await input.fill(docChild1);
+    await searchContainer.getByText(docChild1).click();
+
+    const interlinkChild1 = editor.getByRole('button', {
+      name: docChild1,
+    });
+    await expect(interlinkChild1).toBeVisible({ timeout: 10000 });
+    await expect(interlinkChild1.locator('svg').first()).toBeVisible();
   });
 
-  test('it checks interlink shortcut @', async ({ page, browserName }) => {
-    const [randomDoc] = await createDoc(page, 'doc-interlink', browserName, 1);
+  test('it checks multiple big doc scroll to the top', async ({
+    page,
+    browserName,
+  }) => {
+    const [randomDoc] = await createDoc(page, 'doc-scroll', browserName, 1);
 
-    await verifyDocName(page, randomDoc);
+    for (let i = 0; i < 15; i++) {
+      await page.keyboard.press('Enter');
+      await writeInEditor({ page, text: 'Hello Parent ' + i });
+    }
 
-    const editor = page.locator('.bn-block-outer').last();
-    await editor.click();
-    await page.keyboard.press('@');
+    const editor = await getEditor({ page });
+    await expect(
+      editor.getByText('Hello Parent 1', { exact: true }),
+    ).not.toBeInViewport();
+    await expect(editor.getByText('Hello Parent 14')).toBeInViewport();
+
+    const { name: docChild } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-scroll-child',
+    );
+
+    for (let i = 0; i < 15; i++) {
+      await page.keyboard.press('Enter');
+      await writeInEditor({ page, text: 'Hello Child ' + i });
+    }
 
     await expect(
-      page.locator(
-        "span[data-inline-content-type='interlinkingSearchInline'] input",
-      ),
-    ).toBeVisible();
+      editor.getByText('Hello Child 1', { exact: true }),
+    ).not.toBeInViewport();
+    await expect(editor.getByText('Hello Child 14')).toBeInViewport();
+
+    await navigateToPageFromTree({ page, title: randomDoc });
+
+    await expect(
+      editor.getByText('Hello Parent 1', { exact: true }),
+    ).toBeInViewport();
+    await expect(editor.getByText('Hello Parent 14')).not.toBeInViewport();
+
+    await navigateToPageFromTree({ page, title: docChild });
+
+    await expect(
+      editor.getByText('Hello Child 1', { exact: true }),
+    ).toBeInViewport();
+    await expect(editor.getByText('Hello Child 14')).not.toBeInViewport();
+  });
+
+  test('it embeds PDF', async ({ page, browserName }) => {
+    await createDoc(page, 'doc-toolbar', browserName, 1);
+
+    await openSuggestionMenu({ page });
+    await page.getByText('Embed a PDF file').click();
+
+    const pdfBlock = page.locator('div[data-content-type="pdf"]').first();
+
+    await expect(pdfBlock).toBeVisible();
+
+    await page.getByText(/Add (PDF|file)/).click();
+    const fileChooserPromise = page.waitForEvent('filechooser');
+    const downloadPromise = page.waitForEvent('download');
+    await page.getByText(/Upload (PDF|file)/).click();
+    const fileChooser = await fileChooserPromise;
+
+    await fileChooser.setFiles(path.join(__dirname, 'assets/test-pdf.pdf'));
+
+    // Wait for the media-check to be processed
+    await page.waitForTimeout(1000);
+
+    const pdfEmbed = page
+      .locator('.--docs--editor-container embed.bn-visual-media')
+      .first();
+
+    // Check src of pdf
+    expect(await pdfEmbed.getAttribute('src')).toMatch(
+      /http:\/\/localhost:8083\/media\/.*\/attachments\/.*.pdf/,
+    );
+
+    await expect(pdfEmbed).toHaveAttribute('type', 'application/pdf');
+    await expect(pdfEmbed).toHaveAttribute('role', 'presentation');
+
+    // Check download with original filename
+    await page.locator('.bn-block-content[data-content-type="pdf"]').click();
+    await page.locator('[data-test="downloadfile"]').click();
+
+    const download = await downloadPromise;
+    expect(download.suggestedFilename()).toBe('test-pdf.pdf');
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-export.spec.ts

@@ -2,7 +2,7 @@ import path from 'path';
 
 import { expect, test } from '@playwright/test';
 import cs from 'convert-stream';
-import pdf from 'pdf-parse';
+import { pdf } from 'pdf-parse';
 
 import {
   TestLanguage,
@@ -11,6 +11,7 @@ import {
   verifyDocName,
   waitForLanguageSwitch,
 } from './utils-common';
+import { openSuggestionMenu, writeInEditor } from './utils-editor';
 import { createRootSubPage } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
@@ -29,12 +30,7 @@ test.describe('Doc Export', () => {
       })
       .click();
 
-    await expect(
-      page
-        .locator('div')
-        .filter({ hasText: /^Download$/ })
-        .first(),
-    ).toBeVisible();
+    await expect(page.getByTestId('modal-export-title')).toBeVisible();
     await expect(
       page.getByText('Download your document in a .docx or .pdf format.'),
     ).toBeVisible();
@@ -43,9 +39,11 @@ test.describe('Doc Export', () => {
     ).toBeVisible();
     await expect(page.getByRole('combobox', { name: 'Format' })).toBeVisible();
     await expect(
-      page.getByRole('button', { name: 'Close the modal' }),
+      page.getByRole('button', {
+        name: 'Close the download modal',
+      }),
     ).toBeVisible();
-    await expect(page.getByRole('button', { name: 'Download' })).toBeVisible();
+    await expect(page.getByTestId('doc-export-download-button')).toBeVisible();
   });
 
   test('it exports the doc with pdf line break', async ({
@@ -61,20 +59,16 @@ test.describe('Doc Export', () => {
 
     await verifyDocName(page, randomDoc);
 
-    const editor = page.locator('.ProseMirror.bn-editor');
-
-    await editor.click();
-    await editor.locator('.bn-block-outer').last().fill('Hello');
-
+    const editor = await writeInEditor({ page, text: 'Hello' });
     await page.keyboard.press('Enter');
-    await editor.locator('.bn-block-outer').last().fill('/');
+    await openSuggestionMenu({ page });
     await page.getByText('Page Break').click();
 
-    await expect(editor.locator('.bn-page-break')).toBeVisible();
+    await expect(
+      editor.locator('div[data-content-type="pageBreak"]'),
+    ).toBeVisible();
 
-    await page.keyboard.press('Enter');
-
-    await editor.locator('.bn-block-outer').last().fill('World');
+    await writeInEditor({ page, text: 'World' });
 
     await page
       .getByRole('button', {
@@ -86,12 +80,7 @@ test.describe('Doc Export', () => {
       return download.suggestedFilename().includes(`${randomDoc}.pdf`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-        exact: true,
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
@@ -99,8 +88,9 @@ test.describe('Doc Export', () => {
     const pdfBuffer = await cs.toBuffer(await download.createReadStream());
     const pdfData = await pdf(pdfBuffer);
 
-    expect(pdfData.numpages).toBe(2);
-    expect(pdfData.text).toContain('\n\nHello\n\nWorld'); // This is the doc text
+    expect(pdfData.total).toBe(2);
+    expect(pdfData.text).toContain('Hello\n\nWorld\n\n'); // This is the doc text
+    expect(pdfData.info?.Title).toBe(randomDoc);
   });
 
   test('it exports the doc to docx', async ({ page, browserName }) => {
@@ -136,23 +126,13 @@ test.describe('Doc Export', () => {
     await page.getByRole('combobox', { name: 'Format' }).click();
     await page.getByRole('option', { name: 'Docx' }).click();
 
-    await expect(
-      page.getByRole('button', {
-        name: 'Download',
-        exact: true,
-      }),
-    ).toBeVisible();
+    await expect(page.getByTestId('doc-export-download-button')).toBeVisible();
 
     const downloadPromise = page.waitForEvent('download', (download) => {
       return download.suggestedFilename().includes(`${randomDoc}.docx`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-        exact: true,
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${randomDoc}.docx`);
@@ -170,11 +150,13 @@ test.describe('Doc Export', () => {
 
     await verifyDocName(page, randomDoc);
 
-    await page.locator('.ProseMirror.bn-editor').click();
-    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+    await writeInEditor({
+      page,
+      text: 'Hello World 😃🎉🚀🙋‍♀️🧑🏿‍❤️‍💋‍🧑🏾',
+    });
 
     await page.keyboard.press('Enter');
-    await page.locator('.bn-block-outer').last().fill('/');
+    await openSuggestionMenu({ page });
     await page.getByText('Resizable image with caption').click();
 
     const fileChooserPromise = page.waitForEvent('filechooser');
@@ -218,11 +200,7 @@ test.describe('Doc Export', () => {
 
     await new Promise((resolve) => setTimeout(resolve, 1000));
 
-    await expect(
-      page.getByRole('button', {
-        name: 'Download',
-      }),
-    ).toBeVisible();
+    await expect(page.getByTestId('doc-export-download-button')).toBeVisible();
 
     const responseCorsPromise = page.waitForResponse(
       (response) =>
@@ -233,11 +211,7 @@ test.describe('Doc Export', () => {
       return download.suggestedFilename().includes(`${randomDoc}.pdf`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const responseCors = await responseCorsPromise;
     expect(responseCors.ok()).toBe(true);
@@ -279,21 +253,13 @@ test.describe('Doc Export', () => {
       })
       .click();
 
-    await expect(
-      page.getByRole('button', {
-        name: 'Download',
-      }),
-    ).toBeVisible();
+    await expect(page.getByTestId('doc-export-download-button')).toBeVisible();
 
     const downloadPromise = page.waitForEvent('download', (download) => {
       return download.suggestedFilename().includes(`${randomDoc}.pdf`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
@@ -304,57 +270,6 @@ test.describe('Doc Export', () => {
     expect(pdfData.text).toContain('Hello World'); // This is the pdf text
   });
 
-  /**
-   * We cannot assert the line break is visible in the pdf, but we can assert the
-   * line break is visible in the editor and that the pdf is generated.
-   */
-  test('it exports the doc with divider', async ({ page, browserName }) => {
-    const [randomDoc] = await createDoc(page, 'export-divider', browserName, 1);
-
-    const editor = page.locator('.ProseMirror');
-    await editor.click();
-    await editor.fill('Hello World');
-
-    // Trigger slash menu to show menu
-    await editor.locator('.bn-block-outer').last().fill('/');
-    await page.getByText('Add a horizontal line').click();
-
-    await expect(
-      editor.locator('.bn-block-content[data-content-type="divider"]'),
-    ).toBeVisible();
-
-    await page
-      .getByRole('button', {
-        name: 'Export the document',
-      })
-      .click();
-
-    await expect(
-      page.getByRole('button', {
-        name: 'Download',
-        exact: true,
-      }),
-    ).toBeVisible();
-
-    const downloadPromise = page.waitForEvent('download', (download) => {
-      return download.suggestedFilename().includes(`${randomDoc}.pdf`);
-    });
-
-    void page
-      .getByRole('button', {
-        name: 'Download',
-        exact: true,
-      })
-      .click();
-
-    const download = await downloadPromise;
-    expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
-
-    const pdfBuffer = await cs.toBuffer(await download.createReadStream());
-    const pdfData = await pdf(pdfBuffer);
-    expect(pdfData.text).toContain('Hello World');
-  });
-
   test('it exports the doc with multi columns', async ({
     page,
     browserName,
@@ -392,22 +307,14 @@ test.describe('Doc Export', () => {
       .click();
 
     await expect(
-      page.getByRole('button', {
-        name: 'Download',
-        exact: true,
-      }),
+      page.getByTestId('doc-open-modal-download-button'),
     ).toBeVisible();
 
     const downloadPromise = page.waitForEvent('download', (download) => {
       return download.suggestedFilename().includes(`${randomDoc}.pdf`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-        exact: true,
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${randomDoc}.pdf`);
@@ -443,14 +350,9 @@ test.describe('Doc Export', () => {
       })
       .click();
 
-    await page.waitForURL('**/docs/**', {
-      timeout: 10000,
-      waitUntil: 'domcontentloaded',
-    });
-
-    const input = page.getByLabel('doc title input');
+    const input = page.getByRole('textbox', { name: 'Titre du document' });
     await expect(input).toBeVisible();
-    await expect(input).toHaveText('');
+    await expect(input).toHaveText('', { timeout: 10000 });
     await input.click();
     await input.fill(randomDocFrench);
     await input.blur();
@@ -465,16 +367,15 @@ test.describe('Doc Export', () => {
       })
       .click();
 
+    await expect(
+      page.getByTestId('doc-open-modal-download-button'),
+    ).toBeVisible();
+
     const downloadPromise = page.waitForEvent('download', (download) => {
       return download.suggestedFilename().includes(`${randomDocFrench}.pdf`);
     });
 
-    void page
-      .getByRole('button', {
-        name: 'Télécharger',
-        exact: true,
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${randomDocFrench}.pdf`);
@@ -509,19 +410,23 @@ test.describe('Doc Export', () => {
     await page.locator('.bn-block-outer').last().fill('/');
     await page.getByText('Link a doc').first().click();
 
-    await page
-      .locator(
-        "span[data-inline-content-type='interlinkingSearchInline'] input",
-      )
-      .fill('interlink-child');
+    const input = page.locator(
+      "span[data-inline-content-type='interlinkingSearchInline'] input",
+    );
+    const searchContainer = page.locator('.quick-search-container');
 
-    await page
-      .locator('.quick-search-container')
-      .getByText('interlink-child')
-      .click();
+    await input.fill('export-interlink');
 
-    const interlink = page.getByRole('link', {
-      name: 'interlink-child',
+    await expect(searchContainer).toBeVisible();
+    await expect(searchContainer.getByText(randomDoc)).toBeVisible();
+
+    // We are in docChild, we want to create a link to randomDoc (parent)
+    await searchContainer.getByText(randomDoc).click();
+
+    // Search the interlinking link in the editor (not in the document tree)
+    const editor = page.locator('.ProseMirror.bn-editor');
+    const interlink = editor.getByRole('button', {
+      name: randomDoc,
     });
 
     await expect(interlink).toBeVisible();
@@ -536,12 +441,7 @@ test.describe('Doc Export', () => {
       })
       .click();
 
-    void page
-      .getByRole('button', {
-        name: 'Download',
-        exact: true,
-      })
-      .click();
+    void page.getByTestId('doc-export-download-button').click();
 
     const download = await downloadPromise;
     expect(download.suggestedFilename()).toBe(`${docChild}.pdf`);
@@ -549,6 +449,6 @@ test.describe('Doc Export', () => {
     const pdfBuffer = await cs.toBuffer(await download.createReadStream());
     const pdfData = await pdf(pdfBuffer);
 
-    expect(pdfData.text).toContain('interlink-child'); // This is the pdf text
+    expect(pdfData.text).toContain(randomDoc);
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-grid-dnd.spec.ts

@@ -36,9 +36,8 @@ test.describe('Doc grid dnd', () => {
     expect(draggableBoundingBox).toBeDefined();
     expect(dropZoneBoundingBox).toBeDefined();
 
-    // eslint-disable-next-line playwright/no-conditional-in-test
     if (!draggableBoundingBox || !dropZoneBoundingBox) {
-      throw new Error('Impossible de déterminer la position des éléments');
+      throw new Error('Unable to determine the position of the elements');
     }
 
     await page.mouse.move(
@@ -86,9 +85,8 @@ test.describe('Doc grid dnd', () => {
 
     const noDropAndNoDragBoundigBox = await noDropAndNoDrag.boundingBox();
 
-    // eslint-disable-next-line playwright/no-conditional-in-test
     if (!canDropAndDragBoundigBox || !noDropAndNoDragBoundigBox) {
-      throw new Error('Impossible de déterminer la position des éléments');
+      throw new Error('Unable to determine the position of the elements');
     }
 
     await page.mouse.move(
@@ -108,7 +106,7 @@ test.describe('Doc grid dnd', () => {
 
     await expect(dragOverlay).toBeVisible();
     await expect(dragOverlay).toHaveText(
-      'You must be at least the editor of the target document',
+      'You must be at least the administrator of the target document',
     );
 
     await page.mouse.up();
@@ -137,9 +135,8 @@ test.describe('Doc grid dnd', () => {
 
     const noDropAndNoDragBoundigBox = await noDropAndNoDrag.boundingBox();
 
-    // eslint-disable-next-line playwright/no-conditional-in-test
     if (!canDropAndDragBoundigBox || !noDropAndNoDragBoundigBox) {
-      throw new Error('Impossible de déterminer la position des éléments');
+      throw new Error('Unable to determine the position of the elements');
     }
 
     await page.mouse.move(

src/frontend/apps/e2e/__tests__/app-impress/doc-grid.spec.ts

@@ -28,7 +28,7 @@ test.describe('Documents Grid mobile', () => {
                     id: '8c1e047a-24e7-4a80-942b-8e9c7ab43e1f',
                     user: {
                       id: '7380f42f-02eb-4ad5-b8f0-037a0e66066d',
-                      email: 'test@test.test',
+                      email: 'test.test@test.test',
                       full_name: 'John Doe',
                       short_name: 'John',
                     },
@@ -80,9 +80,7 @@ test.describe('Documents Grid mobile', () => {
       hasText: 'My mocked document',
     });
 
-    await expect(
-      row.locator('[aria-describedby="doc-title"]').nth(0),
-    ).toHaveText('My mocked document');
+    await expect(row.getByTestId('doc-title')).toHaveText('My mocked document');
   });
 });
 
@@ -119,7 +117,7 @@ test.describe('Document grid item options', () => {
     await page.getByText('push_pin').click();
 
     // Check is pinned
-    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeVisible();
+    await expect(row.getByTestId('doc-pinned-icon')).toBeVisible();
     const leftPanelFavorites = page.getByTestId('left-panel-favorites');
     await expect(leftPanelFavorites.getByText(docTitle)).toBeVisible();
 
@@ -128,7 +126,7 @@ test.describe('Document grid item options', () => {
     await page.getByText('Unpin').click();
 
     // Check is unpinned
-    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeHidden();
+    await expect(row.getByTestId('doc-pinned-icon')).toBeHidden();
     await expect(leftPanelFavorites.getByText(docTitle)).toBeHidden();
   });
 
@@ -141,7 +139,7 @@ test.describe('Document grid item options', () => {
     const row = await getGridRow(page, docTitle);
     await row.getByText(`more_horiz`).click();
 
-    await page.getByRole('menuitem', { name: 'Remove' }).click();
+    await page.getByRole('menuitem', { name: 'Delete' }).click();
 
     await expect(
       page.getByRole('heading', { name: 'Delete a doc' }),
@@ -149,7 +147,7 @@ test.describe('Document grid item options', () => {
 
     await page
       .getByRole('button', {
-        name: 'Confirm deletion',
+        name: 'Delete document',
       })
       .click();
 
@@ -295,7 +293,7 @@ test.describe('Documents Grid', () => {
     docs = result.results as SmallDoc[];
 
     await expect(page.getByTestId('grid-loader')).toBeHidden();
-    await expect(page.locator('h4').getByText('All docs')).toBeVisible();
+    await expect(page.locator('h2').getByText('All docs')).toBeVisible();
 
     const thead = page.getByTestId('docs-grid-header');
     await expect(thead.getByText(/Name/i)).toBeVisible();

src/frontend/apps/e2e/__tests__/app-impress/doc-header.spec.ts

@@ -8,7 +8,7 @@ import {
   verifyDocName,
 } from './utils-common';
 import { mockedAccesses, mockedInvitations } from './utils-share';
-import { createRootSubPage } from './utils-sub-pages';
+import { createRootSubPage, getTreeRow } from './utils-sub-pages';
 
 test.beforeEach(async ({ page }) => {
   await page.goto('/');
@@ -25,7 +25,7 @@ test.describe('Doc Header', () => {
       'It is the card information about the document.',
     );
 
-    const docTitle = card.getByRole('textbox', { name: 'doc title input' });
+    const docTitle = card.getByRole('textbox', { name: 'Document title' });
     await expect(docTitle).toBeVisible();
 
     await page.getByRole('button', { name: 'Share' }).click();
@@ -54,7 +54,7 @@ test.describe('Doc Header', () => {
 
   test('it updates the title doc', async ({ page, browserName }) => {
     await createDoc(page, 'doc-update', browserName, 1);
-    const docTitle = page.getByRole('textbox', { name: 'doc title input' });
+    const docTitle = page.getByRole('textbox', { name: 'Document title' });
     await expect(docTitle).toBeVisible();
     await docTitle.fill('Hello World');
     await docTitle.blur();
@@ -65,42 +65,53 @@ test.describe('Doc Header', () => {
     page,
     browserName,
   }) => {
-    await createDoc(page, 'doc-update', browserName, 1);
-    const docTitle = page.getByRole('textbox', { name: 'doc title input' });
-    await expect(docTitle).toBeVisible();
-    await docTitle.fill('👍 Hello Emoji World');
+    await createDoc(page, 'doc-update-emoji', browserName, 1);
+
+    const emojiPicker = page.locator('.--docs--doc-title').getByRole('button');
+
+    // Top parent should not have emoji picker
+    await expect(emojiPicker).toBeHidden();
+
+    const { name: docChild } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-update-emoji-child',
+    );
+
+    await verifyDocName(page, docChild);
+
+    await expect(emojiPicker).toBeVisible();
+    await emojiPicker.click({
+      delay: 100,
+    });
+    await page.getByRole('button', { name: '😀' }).first().click();
+    await expect(emojiPicker).toHaveText('😀');
+
+    const docTitle = page.getByRole('textbox', { name: 'Document title' });
+    await docTitle.fill('Hello Emoji World');
     await docTitle.blur();
-    await verifyDocName(page, '👍 Hello Emoji World');
+    await verifyDocName(page, 'Hello Emoji World');
 
     // Check the tree
-    const docTree = page.getByTestId('doc-tree');
-    await expect(docTree.getByText('Hello Emoji World')).toBeVisible();
-    await expect(docTree.getByLabel('Document emoji icon')).toBeVisible();
-    await expect(docTree.getByLabel('Simple document icon')).toBeHidden();
-
-    await page.getByTestId('home-button').click();
-
-    // Check the documents grid
-    const gridRow = await getGridRow(page, 'Hello Emoji World');
-    await expect(gridRow.getByLabel('Document emoji icon')).toBeVisible();
-    await expect(gridRow.getByLabel('Simple document icon')).toBeHidden();
+    const row = await getTreeRow(page, 'Hello Emoji World');
+    await expect(row.getByText('😀')).toBeVisible();
   });
 
   test('it deletes the doc', async ({ page, browserName }) => {
     const [randomDoc] = await createDoc(page, 'doc-delete', browserName, 1);
 
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Delete document').click();
+    await page.getByRole('menuitem', { name: 'Delete document' }).click();
 
     await expect(
       page.getByRole('heading', { name: 'Delete a doc' }),
     ).toBeVisible();
 
-    await expect(page.getByText(`This document and any sub-`)).toBeVisible();
+    await expect(page.getByText(`This document will be`)).toBeVisible();
 
     await page
       .getByRole('button', {
-        name: 'Confirm deletion',
+        name: 'Delete document',
       })
       .click();
 
@@ -142,27 +153,35 @@ test.describe('Doc Header', () => {
 
     await goToGridDoc(page);
 
+    await expect(
+      page.getByRole('textbox', { name: 'Document title' }),
+    ).toContainText('Mocked document');
+
     await expect(
       page.getByRole('button', { name: 'Export the document' }),
     ).toBeVisible();
 
     await page.getByLabel('Open the document options').click();
 
-    await expect(page.getByLabel('Delete document')).toBeDisabled();
+    await expect(
+      page.getByRole('menuitem', { name: 'Delete document' }),
+    ).toBeDisabled();
 
     // Click somewhere else to close the options
     await page.click('body', { position: { x: 0, y: 0 } });
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const shareModal = page.getByLabel('Share modal');
+    const shareModal = page.getByRole('dialog', {
+      name: 'Share modal content',
+    });
     await expect(shareModal).toBeVisible();
     await expect(page.getByText('Share the document')).toBeVisible();
 
     const invitationCard = shareModal.getByLabel('List invitation card');
     await expect(invitationCard).toBeVisible();
     await expect(
-      invitationCard.getByText('test@invitation.test').first(),
+      invitationCard.getByText('test.test@invitation.test').first(),
     ).toBeVisible();
     const invitationRole = invitationCard.getByLabel('doc-role-dropdown');
     await expect(invitationRole).toBeVisible();
@@ -176,7 +195,7 @@ test.describe('Doc Header', () => {
     const roles = memberCard.getByLabel('doc-role-dropdown');
     await expect(memberCard).toBeVisible();
     await expect(
-      memberCard.getByText('test@accesses.test').first(),
+      memberCard.getByText('test.test@accesses.test').first(),
     ).toBeVisible();
     await expect(roles).toBeVisible();
 
@@ -214,35 +233,45 @@ test.describe('Doc Header', () => {
 
     await goToGridDoc(page);
 
+    await expect(
+      page.getByRole('textbox', { name: 'Document title' }),
+    ).toContainText('Mocked document');
+
     await expect(
       page.getByRole('button', { name: 'Export the document' }),
     ).toBeVisible();
     await page.getByLabel('Open the document options').click();
 
-    await expect(page.getByLabel('Delete document')).toBeDisabled();
+    await expect(
+      page.getByRole('menuitem', { name: 'Delete document' }),
+    ).toBeDisabled();
 
     // Click somewhere else to close the options
     await page.click('body', { position: { x: 0, y: 0 } });
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const shareModal = page.getByLabel('Share modal');
+    const shareModal = page.getByRole('dialog', {
+      name: 'Share modal content',
+    });
+    await expect(shareModal).toBeVisible();
     await expect(page.getByText('Share the document')).toBeVisible();
 
     await expect(page.getByPlaceholder('Type a name or email')).toBeHidden();
 
     const invitationCard = shareModal.getByLabel('List invitation card');
+    await expect(invitationCard).toBeVisible();
     await expect(
-      invitationCard.getByText('test@invitation.test').first(),
+      invitationCard.getByText('test.test@invitation.test').first(),
     ).toBeVisible();
-    await expect(invitationCard.getByLabel('doc-role-text')).toBeVisible();
+    await expect(invitationCard.getByLabel('Document role text')).toBeVisible();
     await expect(
       invitationCard.getByRole('button', { name: 'more_horiz' }),
     ).toBeHidden();
 
     const memberCard = shareModal.getByLabel('List members card');
-    await expect(memberCard.getByText('test@accesses.test')).toBeVisible();
-    await expect(memberCard.getByLabel('doc-role-text')).toBeVisible();
+    await expect(memberCard.getByText('test.test@accesses.test')).toBeVisible();
+    await expect(memberCard.getByLabel('Document role text')).toBeVisible();
     await expect(
       memberCard.getByRole('button', { name: 'more_horiz' }),
     ).toBeHidden();
@@ -276,12 +305,18 @@ test.describe('Doc Header', () => {
 
     await goToGridDoc(page);
 
+    await expect(
+      page.getByRole('heading', { name: 'Mocked document' }),
+    ).toBeVisible();
+
     await expect(
       page.getByRole('button', { name: 'Export the document' }),
     ).toBeVisible();
     await page.getByLabel('Open the document options').click();
 
-    await expect(page.getByLabel('Delete document')).toBeDisabled();
+    await expect(
+      page.getByRole('menuitem', { name: 'Delete document' }),
+    ).toBeDisabled();
 
     // Click somewhere else to close the options
     await page.click('body', { position: { x: 0, y: 0 } });
@@ -294,17 +329,18 @@ test.describe('Doc Header', () => {
     await expect(page.getByPlaceholder('Type a name or email')).toBeHidden();
 
     const invitationCard = shareModal.getByLabel('List invitation card');
+    await expect(invitationCard).toBeVisible();
     await expect(
-      invitationCard.getByText('test@invitation.test').first(),
+      invitationCard.getByText('test.test@invitation.test').first(),
     ).toBeVisible();
-    await expect(invitationCard.getByLabel('doc-role-text')).toBeVisible();
+    await expect(invitationCard.getByLabel('Document role text')).toBeVisible();
     await expect(
       invitationCard.getByRole('button', { name: 'more_horiz' }),
     ).toBeHidden();
 
     const memberCard = shareModal.getByLabel('List members card');
-    await expect(memberCard.getByText('test@accesses.test')).toBeVisible();
-    await expect(memberCard.getByLabel('doc-role-text')).toBeVisible();
+    await expect(memberCard.getByText('test.test@accesses.test')).toBeVisible();
+    await expect(memberCard.getByLabel('Document role text')).toBeVisible();
     await expect(
       memberCard.getByRole('button', { name: 'more_horiz' }),
     ).toBeHidden();
@@ -314,7 +350,6 @@ test.describe('Doc Header', () => {
     page,
     browserName,
   }) => {
-    // eslint-disable-next-line playwright/no-skipped-test
     test.skip(
       browserName === 'webkit',
       'navigator.clipboard is not working with webkit and playwright',
@@ -337,7 +372,7 @@ test.describe('Doc Header', () => {
 
     // Copy content to clipboard
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Copy as Markdown').click();
+    await page.getByRole('menuitem', { name: 'Copy as Markdown' }).click();
     await expect(page.getByText('Copied to clipboard')).toBeVisible();
 
     // Test that clipboard is in Markdown format
@@ -349,7 +384,6 @@ test.describe('Doc Header', () => {
   });
 
   test('It checks the copy as HTML button', async ({ page, browserName }) => {
-    // eslint-disable-next-line playwright/no-skipped-test
     test.skip(
       browserName === 'webkit',
       'navigator.clipboard is not working with webkit and playwright',
@@ -372,7 +406,7 @@ test.describe('Doc Header', () => {
 
     // Copy content to clipboard
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Copy as HTML').click();
+    await page.getByRole('menuitem', { name: 'Copy as HTML' }).click();
     await expect(page.getByText('Copied to clipboard')).toBeVisible();
 
     // Test that clipboard is in HTML format
@@ -384,7 +418,6 @@ test.describe('Doc Header', () => {
   });
 
   test('it checks the copy link button', async ({ page, browserName }) => {
-    // eslint-disable-next-line playwright/no-skipped-test
     test.skip(
       browserName === 'webkit',
       'navigator.clipboard is not working with webkit and playwright',
@@ -430,11 +463,15 @@ test.describe('Doc Header', () => {
   test('it pins a document', async ({ page, browserName }) => {
     const [docTitle] = await createDoc(page, `Pin doc`, browserName);
 
-    await page.getByLabel('Open the document options').click();
+    await page
+      .getByRole('button', { name: 'Open the document options' })
+      .click();
 
     // Pin
     await page.getByText('push_pin').click();
-    await page.getByLabel('Open the document options').click();
+    await page
+      .getByRole('button', { name: 'Open the document options' })
+      .click();
     await expect(page.getByText('Unpin')).toBeVisible();
 
     await page.goto('/');
@@ -442,22 +479,26 @@ test.describe('Doc Header', () => {
     const row = await getGridRow(page, docTitle);
 
     // Check is pinned
-    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeVisible();
+    await expect(row.getByTestId('doc-pinned-icon')).toBeVisible();
     const leftPanelFavorites = page.getByTestId('left-panel-favorites');
     await expect(leftPanelFavorites.getByText(docTitle)).toBeVisible();
 
     await row.getByText(docTitle).click();
-    await page.getByLabel('Open the document options').click();
+    await page
+      .getByRole('button', { name: 'Open the document options' })
+      .click();
 
     // Unpin
     await page.getByText('Unpin').click();
-    await page.getByLabel('Open the document options').click();
+    await page
+      .getByRole('button', { name: 'Open the document options' })
+      .click();
     await expect(page.getByText('push_pin')).toBeVisible();
 
     await page.goto('/');
 
     // Check is unpinned
-    await expect(row.locator('[data-testid^="doc-pinned-"]')).toBeHidden();
+    await expect(row.getByTestId('doc-pinned-icon')).toBeHidden();
     await expect(leftPanelFavorites.getByText(docTitle)).toBeHidden();
   });
 
@@ -556,7 +597,7 @@ test.describe('Documents Header mobile', () => {
     await expect(
       page.getByRole('menuitem', { name: 'Copy link' }),
     ).toBeVisible();
-    await page.getByLabel('Share').click();
+    await page.getByRole('menuitem', { name: 'Share' }).click();
     await expect(page.getByRole('button', { name: 'Copy link' })).toBeVisible();
   });
 
@@ -579,9 +620,12 @@ test.describe('Documents Header mobile', () => {
     await goToGridDoc(page);
 
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Share').click();
+    await page.getByRole('menuitem', { name: 'Share' }).click();
 
-    await expect(page.getByLabel('Share modal')).toBeVisible();
+    const shareModal = page.getByRole('dialog', {
+      name: 'Share modal content',
+    });
+    await expect(shareModal).toBeVisible();
     await page.getByRole('button', { name: 'close' }).click();
     await expect(page.getByLabel('Share modal')).toBeHidden();
   });

src/frontend/apps/e2e/__tests__/app-impress/doc-inherited-share.spec.ts

@@ -18,7 +18,7 @@ test.describe('Inherited share accesses', () => {
     ).toBeVisible();
 
     const user = page.getByTestId(
-      `doc-share-member-row-user@${browserName}.test`,
+      `doc-share-member-row-user.test@${browserName}.test`,
     );
     await expect(user).toBeVisible();
     await expect(user.getByText('E2E Chromium')).toBeVisible();

src/frontend/apps/e2e/__tests__/app-impress/doc-member-create.spec.ts

@@ -7,6 +7,8 @@ import {
   randomName,
   verifyDocName,
 } from './utils-common';
+import { writeInEditor } from './utils-editor';
+import { connectOtherUserToDoc, updateRoleUser } from './utils-share';
 import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Document create member', () => {
@@ -15,7 +17,7 @@ test.describe('Document create member', () => {
   });
 
   test('it selects 2 users and 1 invitation', async ({ page, browserName }) => {
-    const inputFill = 'user ';
+    const inputFill = 'user.test';
     const responsePromise = page.waitForResponse(
       (response) =>
         response.url().includes(`/users/?q=${encodeURIComponent(inputFill)}`) &&
@@ -25,9 +27,8 @@ test.describe('Document create member', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const inputSearch = page.getByRole('combobox', {
-      name: 'Quick search input',
-    });
+    const inputSearch = page.getByTestId('quick-search-input');
+
     await expect(inputSearch).toBeVisible();
 
     // Select user 1 and verify tag
@@ -74,13 +75,15 @@ test.describe('Document create member', () => {
 
     // Check roles are displayed
     await list.getByLabel('doc-role-dropdown').click();
-    await expect(page.getByLabel('Reader')).toBeVisible();
-    await expect(page.getByLabel('Editor')).toBeVisible();
-    await expect(page.getByLabel('Owner')).toBeVisible();
-    await expect(page.getByLabel('Administrator')).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Reader' })).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Editor' })).toBeVisible();
+    await expect(page.getByRole('menuitem', { name: 'Owner' })).toBeVisible();
+    await expect(
+      page.getByRole('menuitem', { name: 'Administrator' }),
+    ).toBeVisible();
 
     // Validate
-    await page.getByLabel('Administrator').click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await page.getByRole('button', { name: 'Invite' }).click();
 
     // Check invitation added
@@ -117,9 +120,7 @@ test.describe('Document create member', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const inputSearch = page.getByRole('combobox', {
-      name: 'Quick search input',
-    });
+    const inputSearch = page.getByTestId('quick-search-input');
 
     const [email] = randomName('test@test.fr', browserName, 1);
     await inputSearch.fill(email);
@@ -128,7 +129,7 @@ test.describe('Document create member', () => {
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Owner').click();
+    await page.getByRole('menuitem', { name: 'Owner' }).click();
 
     const responsePromiseCreateInvitation = page.waitForResponse(
       (response) =>
@@ -146,7 +147,7 @@ test.describe('Document create member', () => {
 
     // Choose a role
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Owner').click();
+    await page.getByRole('menuitem', { name: 'Owner' }).click();
 
     const responsePromiseCreateInvitationFail = page.waitForResponse(
       (response) =>
@@ -167,18 +168,23 @@ test.describe('Document create member', () => {
 
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const inputSearch = page.getByRole('combobox', {
-      name: 'Quick search input',
-    });
+    const inputSearch = page.getByTestId('quick-search-input');
 
-    const email = randomName('test@test.fr', browserName, 1)[0];
+    let email = 'user.test21@example.COM';
     await inputSearch.fill(email);
+
+    // Check email is found in search (case insensitive)
+    await expect(page.getByRole('option').getByText(email)).toHaveCount(1);
+
+    email = email + 'M';
+    await inputSearch.fill(email);
+
     await page.getByTestId(`search-user-row-${email}`).click();
 
     // Choose a role
     const container = page.getByTestId('doc-share-add-member-list');
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Administrator').click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
 
     const responsePromiseCreateInvitation = page.waitForResponse(
       (response) =>
@@ -193,26 +199,32 @@ test.describe('Document create member', () => {
 
     const listInvitation = page.getByTestId('doc-share-quick-search');
     const userInvitation = listInvitation.getByTestId(
-      `doc-share-invitation-row-${email}`,
+      `doc-share-invitation-row-${email.toLowerCase()}`,
     );
     await expect(userInvitation).toBeVisible();
 
+    const responsePromisePatchInvitation = page.waitForResponse(
+      (response) =>
+        response.url().includes('/invitations/') &&
+        response.status() === 200 &&
+        response.request().method() === 'PATCH',
+    );
+
     await userInvitation.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Reader').click();
+    await page.getByRole('menuitem', { name: 'Reader' }).click();
+
+    const responsePatchInvitation = await responsePromisePatchInvitation;
+    expect(responsePatchInvitation.ok()).toBeTruthy();
 
     const moreActions = userInvitation.getByRole('button', {
-      name: 'more_horiz',
+      name: 'Open invitation actions menu',
     });
     await moreActions.click();
 
-    await page.getByLabel('Delete').click();
+    await page.getByRole('menuitem', { name: 'Delete' }).click();
 
     await expect(userInvitation).toBeHidden();
   });
-});
-
-test.describe('Document create member: Multiple login', () => {
-  test.use({ storageState: { cookies: [], origins: [] } });
 
   test('It creates a member from a request coming from a 403 page', async ({
     page,
@@ -220,9 +232,6 @@ test.describe('Document create member: Multiple login', () => {
   }) => {
     test.slow();
 
-    await page.goto('/');
-    await keyCloakSignIn(page, browserName);
-
     const [docTitle] = await createDoc(
       page,
       'Member access request',
@@ -232,67 +241,63 @@ test.describe('Document create member: Multiple login', () => {
 
     await verifyDocName(page, docTitle);
 
-    const urlDoc = page.url();
+    await writeInEditor({ page, text: 'Hello World' });
 
-    await page
-      .getByRole('button', {
-        name: 'Logout',
-      })
-      .click();
+    const docUrl = page.url();
 
-    const otherBrowser = BROWSERS.find((b) => b !== browserName);
-
-    await keyCloakSignIn(page, otherBrowser!);
-
-    await expect(page.getByTestId('header-logo-link')).toBeVisible();
-
-    await page.goto(urlDoc);
+    // Other user will request access
+    const { otherPage, otherBrowserName, cleanup } =
+      await connectOtherUserToDoc({ browserName, docUrl });
 
     await expect(
-      page.getByText('Insufficient access rights to view the document.'),
+      otherPage.getByText('Insufficient access rights to view the document.'),
     ).toBeVisible({
       timeout: 10000,
     });
 
-    await page.getByRole('button', { name: 'Request access' }).click();
+    await otherPage.getByRole('button', { name: 'Request access' }).click();
 
     await expect(
-      page.getByText('Your access request for this document is pending.'),
+      otherPage.getByText('Your access request for this document is pending.'),
     ).toBeVisible();
 
-    await page
-      .getByRole('button', {
-        name: 'Logout',
-      })
-      .click();
-
-    await page.goto('/');
-    await keyCloakSignIn(page, browserName);
-
-    await expect(page.getByTestId('header-logo-link')).toBeVisible({
-      timeout: 10000,
-    });
-
-    await page.goto(urlDoc);
-
+    // First user approves the request
     await page.getByRole('button', { name: 'Share' }).click();
 
     await expect(page.getByText('Access Requests')).toBeVisible();
-    await expect(page.getByText(`E2E ${otherBrowser}`)).toBeVisible();
+    await expect(page.getByText(`E2E ${otherBrowserName}`)).toBeVisible();
 
-    const emailRequest = `user@${otherBrowser}.test`;
+    const emailRequest = `user.test@${otherBrowserName}.test`;
     await expect(page.getByText(emailRequest)).toBeVisible();
     const container = page.getByTestId(
       `doc-share-access-request-row-${emailRequest}`,
     );
     await container.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Administrator').click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await container.getByRole('button', { name: 'Approve' }).click();
 
     await expect(page.getByText('Access Requests')).toBeHidden();
     await expect(page.getByText('Share with 2 users')).toBeVisible();
-    await expect(page.getByText(`E2E ${otherBrowser}`)).toBeVisible();
+    await expect(page.getByText(`E2E ${otherBrowserName}`)).toBeVisible();
+
+    // Other user verifies he has access
+    await otherPage.reload();
+    await verifyDocName(otherPage, docTitle);
+    await expect(otherPage.getByText('Hello World')).toBeVisible();
+
+    // Revoke access
+    await updateRoleUser(page, 'Remove access', emailRequest);
+    await expect(
+      otherPage.getByText('Insufficient access rights to view the document.'),
+    ).toBeVisible();
+
+    // Cleanup: other user logout
+    await cleanup();
   });
+});
+
+test.describe('Document create member: Multiple login', () => {
+  test.use({ storageState: { cookies: [], origins: [] } });
 
   test('It cannot request member access on child doc on a 403 page', async ({
     page,

src/frontend/apps/e2e/__tests__/app-impress/doc-member-list.spec.ts

@@ -1,6 +1,6 @@
 import { expect, test } from '@playwright/test';
 
-import { createDoc, goToGridDoc, verifyDocName } from './utils-common';
+import { createDoc, verifyDocName } from './utils-common';
 import { addNewMember } from './utils-share';
 
 test.beforeEach(async ({ page }) => {
@@ -8,8 +8,14 @@ test.beforeEach(async ({ page }) => {
 });
 
 test.describe('Document list members', () => {
-  test('it checks a big list of members', async ({ page }) => {
-    const docTitle = await goToGridDoc(page);
+  test('it checks a big list of members', async ({ page, browserName }) => {
+    const [docTitle] = await createDoc(
+      page,
+      'members-big-members-list',
+      browserName,
+      1,
+    );
+
     await verifyDocName(page, docTitle);
 
     // Get the current URL and extract the last part
@@ -73,7 +79,7 @@ test.describe('Document list members', () => {
     await expect(loadMore).toBeHidden();
   });
 
-  test('it checks a big list of invitations', async ({ page }) => {
+  test('it checks a big list of invitations', async ({ page, browserName }) => {
     await page.route(
       /.*\/documents\/.*\/invitations\/\?page=.*/,
       async (route) => {
@@ -108,7 +114,12 @@ test.describe('Document list members', () => {
       },
     );
 
-    const docTitle = await goToGridDoc(page);
+    const [docTitle] = await createDoc(
+      page,
+      'members-big-invitation-list',
+      browserName,
+      1,
+    );
     await verifyDocName(page, docTitle);
     await page.getByRole('button', { name: 'Share' }).click();
 
@@ -139,7 +150,7 @@ test.describe('Document list members', () => {
     const list = page.getByTestId('doc-share-quick-search');
     await expect(list).toBeVisible();
     const currentUser = list.getByTestId(
-      `doc-share-member-row-user@${browserName}.test`,
+      `doc-share-member-row-user.test@${browserName}.test`,
     );
     const currentUserRole = currentUser.getByLabel('doc-role-dropdown');
     await expect(currentUser).toBeVisible();
@@ -151,7 +162,6 @@ test.describe('Document list members', () => {
     await expect(soloOwner).toBeVisible();
 
     await list.click({
-      // eslint-disable-next-line playwright/no-force-option
       force: true, // Force click to close the dropdown
     });
     const newUserEmail = await addNewMember(page, 0, 'Owner');
@@ -163,23 +173,21 @@ test.describe('Document list members', () => {
     await currentUserRole.click();
     await expect(soloOwner).toBeHidden();
     await list.click({
-      // eslint-disable-next-line playwright/no-force-option
       force: true, // Force click to close the dropdown
     });
 
     await newUserRoles.click();
     await list.click({
-      // eslint-disable-next-line playwright/no-force-option
       force: true, // Force click to close the dropdown
     });
 
     await currentUserRole.click();
-    await page.getByLabel('Administrator').click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await list.click();
     await expect(currentUserRole).toBeVisible();
 
     await currentUserRole.click();
-    await page.getByLabel('Reader').click();
+    await page.getByRole('menuitem', { name: 'Reader' }).click();
     await list.click();
     await expect(currentUserRole).toBeHidden();
   });
@@ -193,7 +201,7 @@ test.describe('Document list members', () => {
 
     const list = page.getByTestId('doc-share-quick-search');
 
-    const emailMyself = `user@${browserName}.test`;
+    const emailMyself = `user.test@${browserName}.test`;
     const mySelf = list.getByTestId(`doc-share-member-row-${emailMyself}`);
     const mySelfRole = mySelf.getByRole('button', {
       name: 'doc-role-dropdown',

src/frontend/apps/e2e/__tests__/app-impress/doc-routing.spec.ts

@@ -9,6 +9,7 @@ import {
   mockedDocument,
   verifyDocName,
 } from './utils-common';
+import { writeInEditor } from './utils-editor';
 import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc Routing', () => {
@@ -40,7 +41,6 @@ test.describe('Doc Routing', () => {
   });
 
   test('checks 404 on docs/[id] page', async ({ page }) => {
-    // eslint-disable-next-line playwright/no-wait-for-timeout
     await page.waitForTimeout(300);
 
     await page.goto('/docs/some-unknown-doc');
@@ -59,16 +59,23 @@ test.describe('Doc Routing', () => {
 
     await createRootSubPage(page, browserName, '401-doc-child');
 
-    await page.locator('.ProseMirror.bn-editor').fill('Hello World');
+    await writeInEditor({ page, text: 'Hello World' });
 
     const responsePromise = page.route(
       /.*\/documents\/.*\/$|users\/me\/$/,
       async (route) => {
         const request = route.request();
 
+        // When we quit a document, a PATCH request is sent to save the document.
+        // We intercept this request to simulate a 401 error from the backend.
+        // The GET request to users/me is also intercepted to simulate the user
+        // being logged out when trying to fetch user info.
+        // This way we can test the 401 error handling when saving the document
         if (
-          request.method().includes('PATCH') ||
-          request.method().includes('GET')
+          (request.url().includes('/documents/') &&
+            request.method().includes('PATCH')) ||
+          (request.url().includes('/users/me/') &&
+            request.method().includes('GET'))
         ) {
           await route.fulfill({
             status: 401,
@@ -86,9 +93,15 @@ test.describe('Doc Routing', () => {
 
     await responsePromise;
 
-    await expect(page.getByText('Log in to access the document')).toBeVisible({
+    await expect(page.getByText('Log in to access the document.')).toBeVisible({
       timeout: 10000,
     });
+
+    await expect(page.locator('meta[name="robots"]')).toHaveAttribute(
+      'content',
+      'noindex',
+    );
+    await expect(page).toHaveTitle(/401 Unauthorized - Docs/);
   });
 });
 

src/frontend/apps/e2e/__tests__/app-impress/doc-search.spec.ts

@@ -33,7 +33,7 @@ test.describe('Document search', () => {
     ).toBeVisible();
 
     await expect(
-      page.getByLabel('Search modal').getByText('search'),
+      page.getByRole('heading', { name: 'Search docs' }),
     ).toBeVisible();
 
     const inputSearch = page.getByPlaceholder('Type the name of a document');
@@ -79,7 +79,7 @@ test.describe('Document search', () => {
 
     await page.keyboard.press('Control+k');
     await expect(
-      page.getByLabel('Search modal').getByText('search'),
+      page.getByRole('heading', { name: 'Search docs' }),
     ).toBeVisible();
 
     await page.keyboard.press('Escape');
@@ -173,12 +173,13 @@ test.describe('Document search', () => {
       .getByRole('combobox', { name: 'Quick search input' })
       .fill('sub page search');
 
-    // Expect to find the first doc
+    // Expect to find the first and second docs in the results list
+    const resultsList = page.getByRole('listbox');
     await expect(
-      page.getByRole('presentation').getByLabel(firstDocTitle),
+      resultsList.getByRole('option', { name: firstDocTitle }),
     ).toBeVisible();
     await expect(
-      page.getByRole('presentation').getByLabel(secondDocTitle),
+      resultsList.getByRole('option', { name: secondDocTitle }),
     ).toBeVisible();
 
     await page.getByRole('button', { name: 'close' }).click();
@@ -195,14 +196,15 @@ test.describe('Document search', () => {
       .fill('second');
 
     // Now there is a sub page - expect to have the focus on the current doc
+    const updatedResultsList = page.getByRole('listbox');
     await expect(
-      page.getByRole('presentation').getByLabel(secondDocTitle),
+      updatedResultsList.getByRole('option', { name: secondDocTitle }),
     ).toBeVisible();
     await expect(
-      page.getByRole('presentation').getByLabel(secondChildDocTitle),
+      updatedResultsList.getByRole('option', { name: secondChildDocTitle }),
     ).toBeVisible();
     await expect(
-      page.getByRole('presentation').getByLabel(firstDocTitle),
+      updatedResultsList.getByRole('option', { name: firstDocTitle }),
     ).toBeHidden();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/doc-table-content.spec.ts

@@ -8,8 +8,6 @@ test.beforeEach(async ({ page }) => {
 
 test.describe('Doc Table Content', () => {
   test('it checks the doc table content', async ({ page, browserName }) => {
-    test.setTimeout(60000);
-
     const [randomDoc] = await createDoc(
       page,
       'doc-table-content',

src/frontend/apps/e2e/__tests__/app-impress/doc-trashbin.spec.ts

@@ -0,0 +1,151 @@
+import { expect, test } from '@playwright/test';
+
+import {
+  clickInEditorMenu,
+  clickInGridMenu,
+  createDoc,
+  getGridRow,
+  verifyDocName,
+} from './utils-common';
+import { addNewMember } from './utils-share';
+import {
+  addChild,
+  createRootSubPage,
+  navigateToPageFromTree,
+} from './utils-sub-pages';
+
+test.beforeEach(async ({ page }) => {
+  await page.goto('/');
+});
+
+test.describe('Doc Trashbin', () => {
+  test('it controls UI and interaction from the grid page', async ({
+    page,
+    browserName,
+  }) => {
+    const [title1] = await createDoc(page, 'my-trash-doc-1', browserName, 1);
+    const [title2] = await createDoc(page, 'my-trash-doc-2', browserName, 1);
+    await verifyDocName(page, title2);
+    await page.getByRole('button', { name: 'Share' }).click();
+    await addNewMember(page, 0, 'Editor');
+    await page.getByRole('button', { name: 'close' }).click();
+
+    await page.getByRole('button', { name: 'Back to homepage' }).click();
+
+    const row1 = await getGridRow(page, title1);
+    await clickInGridMenu(page, row1, 'Delete');
+    await page.getByRole('button', { name: 'Delete document' }).click();
+    await expect(row1.getByText(title1)).toBeHidden();
+
+    const row2 = await getGridRow(page, title2);
+    await clickInGridMenu(page, row2, 'Delete');
+    await page.getByRole('button', { name: 'Delete document' }).click();
+    await expect(row2.getByText(title2)).toBeHidden();
+
+    await page.getByRole('link', { name: 'Trashbin' }).click();
+
+    const docsGrid = page.getByTestId('docs-grid');
+    await expect(docsGrid.getByText('Days remaining')).toBeVisible();
+    await expect(row1.getByText(title1)).toBeVisible();
+    await expect(row1.getByText('30 days')).toBeVisible();
+    await expect(row2.getByText(title2)).toBeVisible();
+    await expect(
+      row2.getByRole('button', {
+        name: 'Open the sharing settings for the document',
+      }),
+    ).toBeVisible();
+    await expect(
+      row2.getByRole('button', {
+        name: 'Open the sharing settings for the document',
+      }),
+    ).toBeDisabled();
+
+    await clickInGridMenu(page, row2, 'Restore');
+
+    await expect(row2.getByText(title2)).toBeHidden();
+    await page.getByRole('link', { name: 'All docs' }).click();
+    const row2Restored = await getGridRow(page, title2);
+    await expect(row2Restored.getByText(title2)).toBeVisible();
+    await row2Restored.getByRole('link', { name: /Open document/ }).click();
+
+    await verifyDocName(page, title2);
+    await page.getByRole('button', { name: 'Back to homepage' }).click();
+    await expect(row2.getByText(title2)).toBeVisible();
+    await expect(
+      row2.getByRole('button', {
+        name: 'Open the sharing settings for the document',
+      }),
+    ).toBeEnabled();
+
+    await page.getByRole('link', { name: 'Trashbin' }).click();
+    await expect(row2.getByText(title2)).toBeHidden();
+  });
+
+  test('it controls UI and interaction from the doc page', async ({
+    page,
+    browserName,
+  }) => {
+    const [topParent] = await createDoc(
+      page,
+      'my-trash-editor-doc',
+      browserName,
+      1,
+    );
+    await verifyDocName(page, topParent);
+    const { name: subDocName } = await createRootSubPage(
+      page,
+      browserName,
+      'my-trash-editor-subdoc',
+    );
+
+    const subsubDocName = await addChild({
+      page,
+      browserName,
+      docParent: subDocName,
+      docName: 'my-trash-editor-subsubdoc',
+    });
+    await verifyDocName(page, subsubDocName);
+
+    await navigateToPageFromTree({ page, title: subDocName });
+    await verifyDocName(page, subDocName);
+
+    await clickInEditorMenu(page, 'Delete sub-document');
+    await page.getByRole('button', { name: 'Delete document' }).click();
+    await verifyDocName(page, topParent);
+
+    await page.getByRole('button', { name: 'Back to homepage' }).click();
+    await page.getByRole('link', { name: 'Trashbin' }).click();
+    const row = await getGridRow(page, subDocName);
+    await row.getByText(subDocName).click();
+    await verifyDocName(page, subDocName);
+
+    await expect(page.getByLabel('Alert deleted document')).toBeVisible();
+    await expect(page.getByRole('button', { name: 'Share' })).toBeDisabled();
+    await expect(page.locator('.bn-editor')).toHaveAttribute(
+      'contenteditable',
+      'false',
+    );
+    const docTree = page.getByTestId('doc-tree');
+    await expect(docTree.getByText(topParent)).toBeHidden();
+    await expect(
+      docTree.getByText(subDocName, {
+        exact: true,
+      }),
+    ).toBeVisible();
+    await expect(docTree.getByText(subsubDocName)).toBeVisible();
+    await expect(
+      docTree
+        .locator(".--docs-sub-page-item[aria-disabled='true']")
+        .getByText(subsubDocName),
+    ).toBeVisible();
+
+    await page.getByRole('button', { name: 'Restore' }).click();
+    await expect(page.getByLabel('Alert deleted document')).toBeHidden();
+    await expect(page.locator('.bn-editor')).toHaveAttribute(
+      'contenteditable',
+      'true',
+    );
+    await expect(page.getByRole('button', { name: 'Share' })).toBeEnabled();
+    await expect(docTree.getByText(topParent)).toBeVisible();
+  });
+});

src/frontend/apps/e2e/__tests__/app-impress/doc-tree.spec.ts

@@ -1,4 +1,3 @@
-/* eslint-disable playwright/no-conditional-in-test */
 import { expect, test } from '@playwright/test';
 
 import {
@@ -10,7 +9,11 @@ import {
   verifyDocName,
 } from './utils-common';
 import { addNewMember } from './utils-share';
-import { clickOnAddRootSubPage, createRootSubPage } from './utils-sub-pages';
+import {
+  clickOnAddRootSubPage,
+  createRootSubPage,
+  getTreeRow,
+} from './utils-sub-pages';
 
 test.describe('Doc Tree', () => {
   test.beforeEach(async ({ page }) => {
@@ -51,7 +54,7 @@ test.describe('Doc Tree', () => {
     await expect(subPageItem).toBeVisible();
     await subPageItem.click();
     await verifyDocName(page, '');
-    const input = page.getByRole('textbox', { name: 'doc title input' });
+    const input = page.getByRole('textbox', { name: 'Document title' });
     await input.click();
     const [randomDocName] = randomName('doc-tree-test', browserName, 1);
     await input.fill(randomDocName);
@@ -197,7 +200,7 @@ test.describe('Doc Tree', () => {
     await page.getByText('Move to my docs').click();
 
     await expect(
-      page.getByRole('textbox', { name: 'doc title input' }),
+      page.getByRole('textbox', { name: 'Document title' }),
     ).not.toHaveText(docChild);
 
     const header = page.locator('header').first();
@@ -221,11 +224,11 @@ test.describe('Doc Tree', () => {
 
     const list = page.getByTestId('doc-share-quick-search');
     const currentUser = list.getByTestId(
-      `doc-share-member-row-user@${browserName}.test`,
+      `doc-share-member-row-user.test@${browserName}.test`,
     );
     const currentUserRole = currentUser.getByLabel('doc-role-dropdown');
     await currentUserRole.click();
-    await page.getByLabel('Administrator').click();
+    await page.getByRole('menuitem', { name: 'Administrator' }).click();
     await list.click();
 
     await page.getByRole('button', { name: 'Ok' }).click();
@@ -236,6 +239,12 @@ test.describe('Doc Tree', () => {
       'doc-tree-detach-child',
     );
 
+    await expect(
+      page
+        .getByLabel('It is the card information about the document.')
+        .getByText('Administrator ·'),
+    ).toBeVisible();
+
     const docTree = page.getByTestId('doc-tree');
     await expect(docTree.getByText(docChild)).toBeVisible();
     await docTree.click();
@@ -253,6 +262,98 @@ test.describe('Doc Tree', () => {
       page.getByRole('menuitem', { name: 'Move to my docs' }),
     ).toHaveAttribute('aria-disabled', 'true');
   });
+
+  test('keyboard navigation with Enter key opens documents', async ({
+    page,
+    browserName,
+  }) => {
+    // Create a parent document
+    const [docParent] = await createDoc(
+      page,
+      'doc-tree-keyboard-nav',
+      browserName,
+      1,
+    );
+    await verifyDocName(page, docParent);
+
+    // Create a sub-document
+    const { name: docChild } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-tree-keyboard-child',
+    );
+
+    const docTree = page.getByTestId('doc-tree');
+    await expect(docTree).toBeVisible();
+
+    // Test keyboard navigation on root document
+    const rootItem = page.getByTestId('doc-tree-root-item');
+    await expect(rootItem).toBeVisible();
+
+    // Focus on the root item and press Enter
+    await rootItem.focus();
+    await expect(rootItem).toBeFocused();
+    await page.keyboard.press('Enter');
+
+    // Verify we navigated to the root document
+    await verifyDocName(page, docParent);
+    await expect(page).toHaveURL(/\/docs\/[^/]+\/?$/);
+
+    // Now test keyboard navigation on sub-document
+    await expect(docTree.getByText(docChild)).toBeVisible();
+  });
+
+  test('it updates the child icon from the tree', async ({
+    page,
+    browserName,
+  }) => {
+    const [docParent] = await createDoc(
+      page,
+      'doc-child-emoji',
+      browserName,
+      1,
+    );
+    await verifyDocName(page, docParent);
+
+    const { name: docChild } = await createRootSubPage(
+      page,
+      browserName,
+      'doc-child-emoji-child',
+    );
+
+    const row = await getTreeRow(page, docChild);
+
+    // Check Remove emoji is not present initially
+    await row.hover();
+    const menu = row.getByText(`more_horiz`);
+    await menu.click();
+    await expect(
+      page.getByRole('menuitem', { name: 'Remove emoji' }),
+    ).toBeHidden();
+
+    // Close the menu
+    await page.keyboard.press('Escape');
+
+    // Update the emoji from the tree
+    await row.locator('.--docs--doc-icon').click();
+    await page.getByRole('button', { name: '😀' }).first().click();
+
+    // Verify the emoji is updated in the tree and in the document title
+    await expect(row.getByText('😀')).toBeVisible();
+
+    const titleEmojiPicker = page
+      .locator('.--docs--doc-title')
+      .getByRole('button');
+    await expect(titleEmojiPicker).toHaveText('😀');
+
+    // Now remove the emoji using the new action
+    await row.hover();
+    await menu.click();
+    await page.getByRole('menuitem', { name: 'Remove emoji' }).click();
+
+    await expect(row.getByText('😀')).toBeHidden();
+    await expect(titleEmojiPicker).not.toHaveText('😀');
+  });
 });
 
 test.describe('Doc Tree: Inheritance', () => {

src/frontend/apps/e2e/__tests__/app-impress/doc-version.spec.ts

@@ -18,7 +18,7 @@ test.describe('Doc Version', () => {
     await verifyDocName(page, randomDoc);
 
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Version history').click();
+    await page.getByRole('menuitem', { name: 'Version history' }).click();
     await expect(page.getByText('History', { exact: true })).toBeVisible();
 
     const modal = page.getByLabel('version history modal');
@@ -54,7 +54,7 @@ test.describe('Doc Version', () => {
     ).toBeVisible();
 
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Version history').click();
+    await page.getByRole('menuitem', { name: 'Version history' }).click();
 
     await expect(panel).toBeVisible();
     await expect(page.getByText('History', { exact: true })).toBeVisible();
@@ -82,7 +82,9 @@ test.describe('Doc Version', () => {
     await verifyDocName(page, 'Mocked document');
 
     await page.getByLabel('Open the document options').click();
-    await expect(page.getByLabel('Version history')).toBeDisabled();
+    await expect(
+      page.getByRole('menuitem', { name: 'Version history' }),
+    ).toBeDisabled();
   });
 
   test('it restores the doc version', async ({ page, browserName }) => {
@@ -109,7 +111,7 @@ test.describe('Doc Version', () => {
     await expect(page.getByText('World')).toBeVisible();
 
     await page.getByLabel('Open the document options').click();
-    await page.getByLabel('Version history').click();
+    await page.getByRole('menuitem', { name: 'Version history' }).click();
 
     const modal = page.getByLabel('version history modal');
     const panel = modal.getByLabel('version list');

src/frontend/apps/e2e/__tests__/app-impress/doc-visibility.spec.ts

@@ -7,6 +7,8 @@ import {
   keyCloakSignIn,
   verifyDocName,
 } from './utils-common';
+import { writeInEditor } from './utils-editor';
+import { addNewMember, connectOtherUserToDoc } from './utils-share';
 import { createRootSubPage } from './utils-sub-pages';
 
 test.describe('Doc Visibility', () => {
@@ -15,7 +17,6 @@ test.describe('Doc Visibility', () => {
   });
 
   test('It checks the copy link button', async ({ page, browserName }) => {
-    // eslint-disable-next-line playwright/no-skipped-test
     test.skip(
       browserName === 'webkit',
       'navigator.clipboard is not working with webkit and playwright',
@@ -45,17 +46,21 @@ test.describe('Doc Visibility', () => {
 
     await expect(selectVisibility.getByText('Private')).toBeVisible();
 
-    await expect(page.getByLabel('Read only')).toBeHidden();
-    await expect(page.getByLabel('Can read and edit')).toBeHidden();
+    await expect(
+      page.getByRole('menuitem', { name: 'Read only' }),
+    ).toBeHidden();
+    await expect(
+      page.getByRole('menuitem', { name: 'Can read and edit' }),
+    ).toBeHidden();
 
     await selectVisibility.click();
-    await page.getByLabel('Connected').click();
+    await page.getByRole('menuitem', { name: 'Connected' }).click();
 
     await expect(page.getByTestId('doc-access-mode')).toBeVisible();
 
     await selectVisibility.click();
 
-    await page.getByLabel('Public', { exact: true }).click();
+    await page.getByRole('menuitem', { name: 'Public' }).click();
 
     await expect(page.getByTestId('doc-access-mode')).toBeVisible();
   });
@@ -119,8 +124,11 @@ test.describe('Doc Visibility: Restricted', () => {
       .click();
 
     const otherBrowser = BROWSERS.find((b) => b !== browserName);
+    if (!otherBrowser) {
+      throw new Error('No alternative browser found');
+    }
 
-    await keyCloakSignIn(page, otherBrowser!);
+    await keyCloakSignIn(page, otherBrowser);
 
     await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
@@ -144,44 +152,32 @@ test.describe('Doc Visibility: Restricted', () => {
 
     await verifyDocName(page, docTitle);
 
+    await writeInEditor({ page, text: 'Hello World' });
+
+    const docUrl = page.url();
+
+    const { otherBrowserName, otherPage, cleanup } =
+      await connectOtherUserToDoc({
+        browserName,
+        docUrl,
+      });
+
+    await expect(
+      otherPage.getByText('Insufficient access rights to view the document.'),
+    ).toBeVisible({
+      timeout: 10000,
+    });
+
     await page.getByRole('button', { name: 'Share' }).click();
 
-    const inputSearch = page.getByRole('combobox', {
-      name: 'Quick search input',
+    await addNewMember(page, 0, 'Reader', otherBrowserName);
+
+    await otherPage.reload();
+    await expect(otherPage.getByText('Hello World')).toBeVisible({
+      timeout: 10000,
     });
 
-    const otherBrowser = BROWSERS.find((b) => b !== browserName);
-    const username = `user@${otherBrowser}.test`;
-    await inputSearch.fill(username);
-    await page.getByRole('option', { name: username }).click();
-
-    // Choose a role
-    const container = page.getByTestId('doc-share-add-member-list');
-    await container.getByLabel('doc-role-dropdown').click();
-    await page.getByLabel('Reader').click();
-
-    await page.getByRole('button', { name: 'Invite' }).click();
-
-    await page.locator('.c__modal__backdrop').click({
-      position: { x: 0, y: 0 },
-    });
-
-    const urlDoc = page.url();
-
-    await page
-      .getByRole('button', {
-        name: 'Logout',
-      })
-      .click();
-
-    await keyCloakSignIn(page, otherBrowser!);
-
-    await expect(page.getByTestId('header-logo-link')).toBeVisible();
-
-    await page.goto(urlDoc);
-
-    await verifyDocName(page, docTitle);
-    await expect(page.getByLabel('Share button')).toBeVisible();
+    await cleanup();
   });
 });
 
@@ -303,7 +299,7 @@ test.describe('Doc Visibility: Public', () => {
     ).toBeVisible();
 
     await page.getByTestId('doc-access-mode').click();
-    await page.getByLabel('Editing').click();
+    await page.getByRole('menuitem', { name: 'Editing' }).click();
 
     await expect(
       page.getByText('The document visibility has been updated.').first(),
@@ -449,7 +445,10 @@ test.describe('Doc Visibility: Authenticated', () => {
       .click();
 
     const otherBrowser = BROWSERS.find((b) => b !== browserName);
-    await keyCloakSignIn(page, otherBrowser!);
+    if (!otherBrowser) {
+      throw new Error('No alternative browser found');
+    }
+    await keyCloakSignIn(page, otherBrowser);
 
     await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,
@@ -523,7 +522,7 @@ test.describe('Doc Visibility: Authenticated', () => {
 
     const urlDoc = page.url();
     await page.getByTestId('doc-access-mode').click();
-    await page.getByLabel('Editing').click();
+    await page.getByRole('menuitem', { name: 'Editing' }).click();
 
     await expect(
       page.getByText('The document visibility has been updated.').first(),
@@ -538,7 +537,10 @@ test.describe('Doc Visibility: Authenticated', () => {
       .click();
 
     const otherBrowser = BROWSERS.find((b) => b !== browserName);
-    await keyCloakSignIn(page, otherBrowser!);
+    if (!otherBrowser) {
+      throw new Error('No alternative browser found');
+    }
+    await keyCloakSignIn(page, otherBrowser);
 
     await expect(page.getByTestId('header-logo-link')).toBeVisible({
       timeout: 10000,

src/frontend/apps/e2e/__tests__/app-impress/footer.spec.ts

@@ -47,7 +47,7 @@ test.describe('Footer', () => {
     // Check the translation
     const header = page.locator('header').first();
     await header.getByRole('button').getByText('English').click();
-    await page.getByLabel('Français').click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
 
     await expect(
       page.locator('footer').getByText('Mentions légales'),
@@ -132,7 +132,7 @@ test.describe('Footer', () => {
     // Check the translation
     const header = page.locator('header').first();
     await header.getByRole('button').getByText('English').click();
-    await page.getByLabel('Français').click();
+    await page.getByRole('menuitem', { name: 'Français' }).click();
 
     await expect(
       page

src/frontend/apps/e2e/__tests__/app-impress/header.spec.ts

@@ -32,6 +32,15 @@ test.describe('Header', () => {
   }) => {
     await overrideConfig(page, {
       FRONTEND_THEME: 'dsfr',
+      theme_customization: {
+        header: {
+          logo: {
+            src: '/assets/logo-gouv.svg',
+            width: '220px',
+            alt: 'Gouvernement Logo',
+          },
+        },
+      },
     });
     await page.goto('/');
 
@@ -76,7 +85,6 @@ test.describe('Header', () => {
      * La gaufre load a js file from a remote server,
      * it takes some time to load the file and have the interaction available
      */
-    // eslint-disable-next-line playwright/no-wait-for-timeout
     await page.waitForTimeout(1500);
 
     await header
@@ -99,6 +107,15 @@ test.describe('Header mobile', () => {
   test('it checks the header when mobile with DSFR theme', async ({ page }) => {
     await overrideConfig(page, {
       FRONTEND_THEME: 'dsfr',
+      theme_customization: {
+        header: {
+          logo: {
+            src: '/assets/logo-gouv.svg',
+            width: '220px',
+            alt: 'Gouvernement Logo',
+          },
+        },
+      },
     });
 
     await page.goto('/');
@@ -132,3 +149,30 @@ test.describe('Header: Log out', () => {
     await expectLoginPage(page);
   });
 });
+
+test.describe('Header: Override configuration', () => {
+  test('checks the header is correctly overrided', async ({ page }) => {
+    await overrideConfig(page, {
+      FRONTEND_THEME: 'dsfr',
+      theme_customization: {
+        header: {
+          logo: {
+            src: '/assets/logo-gouv.svg',
+            width: '220px',
+            alt: '',
+          },
+        },
+      },
+    });
+
+    await page.goto('/');
+    const header = page.locator('header').first();
+
+    const logoImage = header.getByTestId('header-icon-docs');
+    await expect(logoImage).toBeVisible();
+
+    await expect(logoImage).not.toHaveAttribute('src', '/assets/icon-docs.svg');
+    await expect(logoImage).toHaveAttribute('src', '/assets/logo-gouv.svg');
+    await expect(logoImage).toHaveAttribute('alt', '');
+  });
+});

src/frontend/apps/e2e/__tests__/app-impress/home.spec.ts

@@ -131,7 +131,7 @@ test.describe('Home page', () => {
 
     // Keyclock login page
     await expect(
-      page.locator('.login-pf-page-header').getByText('impress'),
+      page.locator('.login-pf #kc-header-wrapper').getByText('impress'),
     ).toBeVisible();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/language.spec.ts

@@ -1,6 +1,7 @@
 import { expect, test } from '@playwright/test';
 
 import { TestLanguage, createDoc, waitForLanguageSwitch } from './utils-common';
+import { openSuggestionMenu } from './utils-editor';
 
 test.describe('Language', () => {
   test.beforeEach(async ({ page }) => {
@@ -51,6 +52,7 @@ test.describe('Language', () => {
     await expect(page.locator('html')).toHaveAttribute('lang', 'en');
     await expect(languagePicker).toContainText('English');
   });
+
   test('can switch language using only keyboard', async ({ page }) => {
     await page.goto('/');
     await waitForLanguageSwitch(page, TestLanguage.English);
@@ -106,18 +108,18 @@ test.describe('Language', () => {
   }) => {
     await createDoc(page, 'doc-toolbar', browserName, 1);
 
-    const editor = page.locator('.ProseMirror');
-
-    // Trigger slash menu to show english menu
-    await editor.click();
-    await editor.fill('/');
+    const editor = await openSuggestionMenu({ page });
     await expect(page.getByText('Headings', { exact: true })).toBeVisible();
 
+    await editor.click(); // close the menu
+
+    await expect(page.getByText('Headings', { exact: true })).toBeHidden();
+
     // Change language to French
     await waitForLanguageSwitch(page, TestLanguage.French);
 
     // Trigger slash menu to show french menu
-    await editor.locator('.bn-block-outer').last().fill('/');
+    await openSuggestionMenu({ page });
     await expect(page.getByText('Titres', { exact: true })).toBeVisible();
   });
 });

src/frontend/apps/e2e/__tests__/app-impress/left-panel.spec.ts

@@ -1,5 +1,7 @@
 import { expect, test } from '@playwright/test';
 
+import { createDoc } from './utils-common';
+
 test.describe('Left panel desktop', () => {
   test.beforeEach(async ({ page }) => {
     await page.goto('/');
@@ -11,6 +13,53 @@ test.describe('Left panel desktop', () => {
     await expect(page.getByTestId('home-button')).toBeVisible();
     await expect(page.getByTestId('new-doc-button')).toBeVisible();
   });
+
+  test('checks resize handle is present and functional on document page', async ({
+    page,
+    browserName,
+  }) => {
+    // On home page, resize handle should NOT be present
+    let resizeHandle = page.locator('[data-panel-resize-handle-id]');
+    await expect(resizeHandle).toBeHidden();
+
+    // Create and navigate to a document
+    await createDoc(page, 'doc-resize-test', browserName, 1);
+
+    // Now resize handle should be visible on document page
+    resizeHandle = page.locator('[data-panel-resize-handle-id]').first();
+    await expect(resizeHandle).toBeVisible();
+
+    const leftPanel = page.getByTestId('left-panel-desktop');
+    await expect(leftPanel).toBeVisible();
+
+    // Get initial panel width
+    const initialBox = await leftPanel.boundingBox();
+    expect(initialBox).not.toBeNull();
+
+    // Get handle position
+    const handleBox = await resizeHandle.boundingBox();
+    expect(handleBox).not.toBeNull();
+
+    // Test resize by dragging the handle
+    await page.mouse.move(
+      handleBox!.x + handleBox!.width / 2,
+      handleBox!.y + handleBox!.height / 2,
+    );
+    await page.mouse.down();
+    await page.mouse.move(
+      handleBox!.x + 100,
+      handleBox!.y + handleBox!.height / 2,
+    );
+    await page.mouse.up();
+
+    // Wait for resize to complete
+    await page.waitForTimeout(200);
+
+    // Verify the panel has been resized
+    const newBox = await leftPanel.boundingBox();
+    expect(newBox).not.toBeNull();
+    expect(newBox!.width).toBeGreaterThan(initialBox!.width);
+  });
 });
 
 test.describe('Left panel mobile', () => {
@@ -47,4 +96,12 @@ test.describe('Left panel mobile', () => {
     await expect(languageButton).toBeInViewport();
     await expect(logoutButton).toBeInViewport();
   });
+
+  test('checks resize handle is not present on mobile', async ({ page }) => {
+    await page.goto('/');
+
+    // Verify the resize handle is NOT present on mobile
+    const resizeHandle = page.locator('[data-panel-resize-handle-id]');
+    await expect(resizeHandle).toBeHidden();
+  });
 });

src/frontend/apps/e2e/__tests__/app-impress/types/pdf-parse.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Type definitions for pdf-parse library
+ * The library doesn't export complete type definitions for the parsed PDF data
+ */
+
+declare module 'pdf-parse' {
+  export interface PdfInfo {
+    Title?: string;
+    Author?: string;
+    Subject?: string;
+    Keywords?: string;
+    Creator?: string;
+    Producer?: string;
+    CreationDate?: string;
+    ModDate?: string;
+    [key: string]: unknown;
+  }
+
+  export interface PdfData {
+    /** Total number of pages */
+    numpages: number;
+    /** Alias for numpages */
+    total?: number;
+    /** Extracted text content from the PDF */
+    text: string;
+    /** PDF metadata information */
+    info?: PdfInfo;
+    /** PDF metadata (alternative structure) */
+    metadata?: unknown;
+    /** PDF version */
+    version?: string;
+  }
+
+  export function pdf(buffer: Buffer): Promise<PdfData>;
+
+  export default pdf;
+}

src/frontend/apps/e2e/__tests__/app-impress/utils-common.ts

@@ -1,6 +1,7 @@
-import { Page, expect } from '@playwright/test';
+import { Locator, Page, expect } from '@playwright/test';
 
-export const BROWSERS = ['chromium', 'webkit', 'firefox'];
+export type BrowserName = 'chromium' | 'firefox' | 'webkit';
+export const BROWSERS: BrowserName[] = ['chromium', 'webkit', 'firefox'];
 
 export const CONFIG = {
   AI_FEATURE_ENABLED: true,
@@ -22,12 +23,13 @@ export const CONFIG = {
   LANGUAGE_CODE: 'en-us',
   POSTHOG_KEY: {},
   SENTRY_DSN: null,
+  TRASHBIN_CUTOFF_DAYS: 30,
   theme_customization: {},
 } as const;
 
 export const overrideConfig = async (
   page: Page,
-  newConfig: { [K in keyof typeof CONFIG]?: unknown },
+  newConfig: { [_K in keyof typeof CONFIG]?: unknown },
 ) =>
   await page.route('**/api/v1.0/config/', async (route) => {
     const request = route.request();
@@ -46,7 +48,7 @@ export const overrideConfig = async (
 export const keyCloakSignIn = async (
   page: Page,
   browserName: string,
-  fromHome: boolean = true,
+  fromHome = true,
 ) => {
   if (fromHome) {
     await page.getByRole('button', { name: 'Start Writing' }).first().click();
@@ -56,7 +58,7 @@ export const keyCloakSignIn = async (
   const password = `password-e2e-${browserName}`;
 
   await expect(
-    page.locator('.login-pf-page-header').getByText('impress'),
+    page.locator('.login-pf #kc-header-wrapper').getByText('impress'),
   ).toBeVisible();
 
   if (await page.getByLabel('Restart login').isVisible()) {
@@ -65,7 +67,7 @@ export const keyCloakSignIn = async (
 
   await page.getByRole('textbox', { name: 'username' }).fill(login);
   await page.getByRole('textbox', { name: 'password' }).fill(password);
-  await page.click('input[type="submit"]', { force: true });
+  await page.click('button[type="submit"]', { force: true });
 };
 
 export const randomName = (name: string, browserName: string, length: number) =>
@@ -77,8 +79,8 @@ export const createDoc = async (
   page: Page,
   docName: string,
   browserName: string,
-  length: number = 1,
-  isMobile: boolean = false,
+  length = 1,
+  isMobile = false,
 ) => {
   const randomDocs = randomName(docName, browserName, length);
 
@@ -101,10 +103,9 @@ export const createDoc = async (
       waitUntil: 'networkidle',
     });
 
-    const input = page.getByLabel('doc title input');
+    const input = page.getByLabel('Document title');
     await expect(input).toBeVisible();
     await expect(input).toHaveText('');
-    await input.click();
 
     await input.fill(randomDocs[i]);
     await input.blur();
@@ -120,10 +121,11 @@ export const verifyDocName = async (page: Page, docName: string) => {
     timeout: 10000,
   });
 
+  /*replace toHaveText with toContainText to handle cases where emojis or other characters might be added*/
   try {
     await expect(
-      page.getByRole('textbox', { name: 'doc title input' }),
-    ).toHaveText(docName);
+      page.getByRole('textbox', { name: 'Document title' }),
+    ).toContainText(docName);
   } catch {
     await expect(page.getByRole('heading', { name: docName })).toBeVisible();
   }
@@ -172,7 +174,7 @@ export const goToGridDoc = async (
 
   await expect(row).toBeVisible();
 
-  const docTitleContent = row.locator('[aria-describedby="doc-title"]').first();
+  const docTitleContent = row.getByTestId('doc-title').first();
   const docTitle = await docTitleContent.textContent();
   expect(docTitle).toBeDefined();
 
@@ -182,9 +184,9 @@ export const goToGridDoc = async (
 };
 
 export const updateDocTitle = async (page: Page, title: string) => {
-  const input = page.getByLabel('doc title input');
-  await expect(input).toBeVisible();
+  const input = page.getByRole('textbox', { name: 'Document title' });
   await expect(input).toHaveText('');
+  await expect(input).toBeVisible();
   await input.click();
   await input.fill(title);
   await input.click();
@@ -322,5 +324,21 @@ export async function waitForLanguageSwitch(
 
   await languagePicker.click();
 
-  await page.getByLabel(lang.label).click();
+  await page.getByRole('menuitem', { name: lang.label }).click();
 }
+
+export const clickInEditorMenu = async (page: Page, textButton: string) => {
+  await page.getByRole('button', { name: 'Open the document options' }).click();
+  await page.getByRole('menuitem', { name: textButton }).click();
+};
+
+export const clickInGridMenu = async (
+  page: Page,
+  row: Locator,
+  textButton: string,
+) => {
+  await row
+    .getByRole('button', { name: /Open the menu of actions for the document/ })
+    .click();
+  await page.getByRole('menuitem', { name: textButton }).click();
+};

src/frontend/apps/e2e/__tests__/app-impress/utils-editor.ts

@@ -0,0 +1,27 @@
+import { Page } from '@playwright/test';
+
+export const getEditor = async ({ page }: { page: Page }) => {
+  const editor = page.locator('.ProseMirror');
+  await editor.click();
+  return editor;
+};
+
+export const openSuggestionMenu = async ({ page }: { page: Page }) => {
+  const editor = await getEditor({ page });
+  await editor.click();
+  await writeInEditor({ page, text: '/' });
+
+  return editor;
+};
+
+export const writeInEditor = async ({
+  page,
+  text,
+}: {
+  page: Page;
+  text: string;
+}) => {
+  const editor = await getEditor({ page });
+  await editor.locator('.bn-block-outer .bn-inline-content').last().fill(text);
+  return editor;
+};

src/frontend/apps/e2e/__tests__/app-impress/utils-share.ts

@@ -1,14 +1,21 @@
-import { Page, expect } from '@playwright/test';
+import { Page, chromium, expect } from '@playwright/test';
+
+import {
+  BROWSERS,
+  BrowserName,
+  keyCloakSignIn,
+  verifyDocName,
+} from './utils-common';
 
 export type Role = 'Administrator' | 'Owner' | 'Member' | 'Editor' | 'Reader';
 export type LinkReach = 'Private' | 'Connected' | 'Public';
-export type LinkRole = 'Reading' | 'Edition';
+export type LinkRole = 'Reading' | 'Editing';
 
 export const addNewMember = async (
   page: Page,
   index: number,
   role: 'Administrator' | 'Owner' | 'Editor' | 'Reader',
-  fillText: string = 'user ',
+  fillText = 'user.test',
 ) => {
   const responsePromiseSearchUser = page.waitForResponse(
     (response) =>
@@ -16,9 +23,7 @@ export const addNewMember = async (
       response.status() === 200,
   );
 
-  const inputSearch = page.getByRole('combobox', {
-    name: 'Quick search input',
-  });
+  const inputSearch = page.getByTestId('quick-search-input');
 
   // Select a new user
   await inputSearch.fill(fillText);
@@ -34,7 +39,7 @@ export const addNewMember = async (
 
   // Choose a role
   await page.getByLabel('doc-role-dropdown').click();
-  await page.getByLabel(role).click();
+  await page.getByRole('menuitem', { name: role }).click();
   await page.getByRole('button', { name: 'Invite' }).click();
 
   return users[index].email;
@@ -61,6 +66,80 @@ export const updateShareLink = async (
   }
 };
 
+export const updateRoleUser = async (
+  page: Page,
+  role: Role | 'Remove access',
+  email: string,
+) => {
+  const list = page.getByTestId('doc-share-quick-search');
+
+  const currentUser = list.getByTestId(`doc-share-member-row-${email}`);
+  const currentUserRole = currentUser.getByLabel('doc-role-dropdown');
+  await currentUserRole.click();
+  await page.getByRole('menuitem', { name: role }).click();
+  await list.click();
+};
+
+/**
+ * Connects another user to a document.
+ * Useful to test real-time collaboration features.
+ * @param browserName The name of the browser to use.
+ * @param docUrl The URL of the document to connect to.
+ * @param docTitle The title of the document (optional).
+ * @returns An object containing the other browser, context, and page.
+ */
+export const connectOtherUserToDoc = async ({
+  browserName,
+  docUrl,
+  docTitle,
+  withoutSignIn,
+}: {
+  browserName: BrowserName;
+  docUrl: string;
+  docTitle?: string;
+  withoutSignIn?: boolean;
+}) => {
+  const otherBrowserName = BROWSERS.find((b) => b !== browserName);
+  if (!otherBrowserName) {
+    throw new Error('No alternative browser found');
+  }
+
+  const otherBrowser = await chromium.launch({ headless: true });
+  const otherContext = await otherBrowser.newContext({
+    locale: 'en-US',
+    timezoneId: 'Europe/Paris',
+    permissions: [],
+    storageState: {
+      cookies: [],
+      origins: [],
+    },
+  });
+  const otherPage = await otherContext.newPage();
+  await otherPage.goto(docUrl);
+
+  if (!withoutSignIn) {
+    await otherPage
+      .getByRole('main', { name: 'Main content' })
+      .getByLabel('Login')
+      .click({
+        timeout: 15000,
+      });
+
+    await keyCloakSignIn(otherPage, otherBrowserName, false);
+  }
+  if (docTitle) {
+    await verifyDocName(otherPage, docTitle);
+  }
+
+  const cleanup = async () => {
+    await otherPage.close();
+    await otherContext.close();
+    await otherBrowser.close();
+  };
+
+  return { otherBrowser, otherContext, otherPage, otherBrowserName, cleanup };
+};
+
 export const mockedInvitations = async (page: Page, json?: object) => {
   let result = [
     {
@@ -72,7 +151,7 @@ export const mockedInvitations = async (page: Page, json?: object) => {
         retrieve: true,
       },
       created_at: '2024-10-03T12:19:26.107687Z',
-      email: 'test@invitation.test',
+      email: 'test.test@invitation.test',
       document: '4888c328-8406-4412-9b0b-c0ba5b9e5fb6',
       role: 'editor',
       issuer: '7380f42f-02eb-4ad5-b8f0-037a0e66066d',
@@ -129,7 +208,7 @@ export const mockedAccesses = async (page: Page, json?: object) => {
             id: 'bc8bbbc5-a635-4f65-9817-fd1e9ec8ef87',
             user: {
               id: 'b4a21bb3-722e-426c-9f78-9d190eda641c',
-              email: 'test@accesses.test',
+              email: 'test.test@accesses.test',
             },
             team: '',
             max_ancestors_role: null,

src/frontend/apps/e2e/__tests__/app-impress/utils-sub-pages.ts

@@ -1,16 +1,18 @@
 import { Page, expect } from '@playwright/test';
 
 import {
+  BrowserName,
   randomName,
   updateDocTitle,
+  verifyDocName,
   waitForResponseCreateDoc,
 } from './utils-common';
 
 export const createRootSubPage = async (
   page: Page,
-  browserName: string,
+  browserName: BrowserName,
   docName: string,
-  isMobile: boolean = false,
+  isMobile = false,
 ) => {
   if (isMobile) {
     await page
@@ -63,5 +65,78 @@ export const clickOnAddRootSubPage = async (page: Page) => {
   const rootItem = page.getByTestId('doc-tree-root-item');
   await expect(rootItem).toBeVisible();
   await rootItem.hover();
-  await rootItem.getByRole('button', { name: 'add_box' }).click();
+  await rootItem.getByTestId('doc-tree-item-actions-add-child').click();
+};
+
+export const addChild = async ({
+  page,
+  browserName,
+  docParent,
+  docName,
+}: {
+  page: Page;
+  browserName: BrowserName;
+  docParent: string;
+  docName: string;
+}) => {
+  let item = page.getByTestId('doc-tree-root-item');
+
+  const isParent = await item
+    .filter({
+      hasText: docParent,
+    })
+    .first()
+    .count();
+
+  if (!isParent) {
+    const items = page.getByRole('treeitem');
+
+    item = items
+      .filter({
+        hasText: docParent,
+      })
+      .first();
+  }
+
+  await item.hover();
+  await item.getByTestId('doc-tree-item-actions-add-child').click();
+
+  const [name] = randomName(docName, browserName, 1);
+  await updateDocTitle(page, name);
+
+  return name;
+};
+
+export const getTreeRow = async (page: Page, title: string) => {
+  const docTree = page.getByTestId('doc-tree');
+  const row = docTree
+    .getByRole('treeitem')
+    .filter({
+      hasText: title,
+    })
+    .first();
+
+  await expect(row).toBeVisible();
+
+  return row;
+};
+
+export const navigateToTopParentFromTree = async ({ page }: { page: Page }) => {
+  await page.getByRole('link', { name: /Open root document/ }).click();
+};
+
+export const navigateToPageFromTree = async ({
+  page,
+  title,
+}: {
+  page: Page;
+  title: string;
+}) => {
+  const docTree = page.getByTestId('doc-tree');
+  await docTree
+    .getByText(title, {
+      exact: true,
+    })
+    .click();
+  await verifyDocName(page, title);
 };

src/frontend/apps/e2e/eslint.config.mjs

@@ -0,0 +1,20 @@
+import { defineConfig } from '@eslint/config-helpers';
+import docsPlugin from 'eslint-plugin-docs';
+
+const eslintConfig = defineConfig([
+  {
+    files: ['**/*.ts', '**/*.mjs'],
+    plugins: {
+      docs: docsPlugin,
+    },
+    extends: ['docs/playwright'],
+    languageOptions: {
+      parserOptions: {
+        tsconfigRootDir: import.meta.dirname,
+        project: ['./tsconfig.json'],
+      },
+    },
+  },
+]);
+
+export default eslintConfig;

src/frontend/apps/e2e/package.json

@@ -1,9 +1,12 @@
 {
   "name": "app-e2e",
-  "version": "3.6.0",
+  "version": "3.8.2",
+  "repository": "https://github.com/suitenumerique/docs",
+  "author": "DINUM",
+  "license": "MIT",
   "private": true,
   "scripts": {
-    "lint": "eslint . --ext .ts",
+    "lint": "eslint",
     "install-playwright": "playwright install --with-deps",
     "test": "playwright test",
     "test:ui": "yarn test --ui",
@@ -12,14 +15,15 @@
     "test:ui::chromium": "yarn test:ui --project=chromium"
   },
   "devDependencies": {
-    "@playwright/test": "1.55.0",
+    "@playwright/test": "1.55.1",
     "@types/node": "*",
     "@types/pdf-parse": "1.1.5",
-    "eslint-config-impress": "*",
+    "eslint-plugin-docs": "*",
     "typescript": "*"
   },
   "dependencies": {
     "convert-stream": "1.0.2",
-    "pdf-parse": "1.1.1"
-  }
+    "pdf-parse": "2.1.7"
+  },
+  "packageManager": "yarn@1.22.22"
 }