fixup! fixup! ✨(backend) extract attachment keys from updated content for access

Author: sampaccoud

src/backend/core/api/serializers.py

@@ -282,13 +282,30 @@ def save(self, **kwargs):
         new_attachments = extracted_attachments - existing_attachments
 
         if new_attachments:
+            attachments_documents = (
+                models.Document.objects.filter(
+                    attachments__overlap=list(new_attachments)
+                )
+                .only("path", "attachments")
+                .order_by("path")
+            )
+
             user = self.context["request"].user
-            readable_documents = models.Document.objects.readable(user).filter(
-                Q(attachments__overlap=list(new_attachments))
+            readable_per_se_paths = (
+                models.Document.objects.readable_per_se(user)
+                .order_by("path")
+                .values_list("path", flat=True)
+            )
+            readable_attachments_paths = utils.filter_descendants(
+                [doc.path for doc in attachments_documents],
+                readable_per_se_paths,
+                skip_sorting=True,
             )
 
             readable_attachments = set()
-            for document in readable_documents:
+            for document in attachments_documents:
+                if document.path not in readable_attachments_paths:
+                    continue
                 readable_attachments.update(set(document.attachments) & new_attachments)
 
             # Update attachments with readable keys