From ff9db1adfda518ff94bd060c26f3ade7281d81ec Mon Sep 17 00:00:00 2001
From: Samir Ladoui <whitexhunter23@gmail.com>
Date: Wed, 12 Feb 2025 13:05:36 +0100
Subject: [PATCH] [UPD] exp_transation_letters: update _getAttachmentsDomain
 and add is_system domain

---
 .../exp_transation_letters/__manifest__.py    |  1 +
 .../static/src/js/media.js                    | 24 +++++++++++++++++++
 .../exp_transation_letters/views/editor.xml   | 10 ++++++++
 3 files changed, 35 insertions(+)
 create mode 100644 odex25_transactions/exp_transation_letters/static/src/js/media.js
 create mode 100644 odex25_transactions/exp_transation_letters/views/editor.xml

diff --git a/odex25_transactions/exp_transation_letters/__manifest__.py b/odex25_transactions/exp_transation_letters/__manifest__.py
index 53a6d0e7e..68126e9f4 100644
--- a/odex25_transactions/exp_transation_letters/__manifest__.py
+++ b/odex25_transactions/exp_transation_letters/__manifest__.py
@@ -24,6 +24,7 @@ Letters Managment
         'views/letters_view.xml',
         'reports/letter_template.xml',
         'reports/formal_letter.xml',
+        'views/editor.xml'
     ],
     'qweb' : [
     ],
diff --git a/odex25_transactions/exp_transation_letters/static/src/js/media.js b/odex25_transactions/exp_transation_letters/static/src/js/media.js
new file mode 100644
index 000000000..54705bf37
--- /dev/null
+++ b/odex25_transactions/exp_transation_letters/static/src/js/media.js
@@ -0,0 +1,24 @@
+odoo.define("exp_transation_letters.custom_file_widget", function (require) {
+  "use strict";
+
+  var FileWidget = require("wysiwyg.widgets.media").FileWidget;
+  var session = require("web.session");
+
+  FileWidget.include({
+    /**
+     * Override _getAttachmentsDomain to restrict attachments to the current user,
+     * but allow admins (base.group_system) to see everything.
+     */
+    _getAttachmentsDomain: function (needle) {
+      var domain = this._super.apply(this, arguments);
+
+      // Check if the user is an admin (base.group_system) synchronously
+      if (!session.is_system) {
+        // Restrict to only attachments created by the current user
+        domain.push(["create_uid", "=", session.uid]);
+      }
+
+      return domain;
+    },
+  });
+});
diff --git a/odex25_transactions/exp_transation_letters/views/editor.xml b/odex25_transactions/exp_transation_letters/views/editor.xml
new file mode 100644
index 000000000..29e061eb9
--- /dev/null
+++ b/odex25_transactions/exp_transation_letters/views/editor.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+
+    <template id="custom_web_editor_assets" inherit_id="web_editor.assets_wysiwyg">
+        <xpath expr="." position="inside">
+            <script type="text/javascript" src="/exp_transation_letters/static/src/js/media.js"/>
+        </xpath>
+    </template>
+
+</odoo>