♻️(backend) change abilities for deleted document

The abilities for a deleted document were too open. We want to restrict
them. Only the restore, retrieve and tree is allowed. The tree method
will need some modifications to get the right informations.

src/backend/core/tests/documents/test_api_documents_trashbin.py

@@ -70,40 +70,40 @@ def test_api_documents_trashbin_format():
     assert results[0] == {
         "id": str(document.id),
         "abilities": {
-            "accesses_manage": True,
-            "accesses_view": True,
-            "ai_transform": True,
-            "ai_translate": True,
-            "attachment_upload": True,
-            "can_edit": True,
-            "children_create": True,
-            "children_list": True,
-            "collaboration_auth": True,
-            "descendants": True,
-            "cors_proxy": True,
-            "content": True,
-            "destroy": True,
-            "duplicate": True,
-            "favorite": True,
-            "invite_owner": True,
-            "link_configuration": True,
+            "accesses_manage": False,
+            "accesses_view": False,
+            "ai_transform": False,
+            "ai_translate": False,
+            "attachment_upload": False,
+            "can_edit": False,
+            "children_create": False,
+            "children_list": False,
+            "collaboration_auth": False,
+            "descendants": False,
+            "cors_proxy": False,
+            "content": False,
+            "destroy": False,
+            "duplicate": False,
+            "favorite": False,
+            "invite_owner": False,
+            "link_configuration": False,
             "link_select_options": {
                 "authenticated": ["reader", "editor"],
                 "public": ["reader", "editor"],
                 "restricted": None,
             },
-            "mask": True,
-            "media_auth": True,
-            "media_check": True,
+            "mask": False,
+            "media_auth": False,
+            "media_check": False,
             "move": False,  # Can't move a deleted document
-            "partial_update": True,
+            "partial_update": False,
             "restore": True,
             "retrieve": True,
             "tree": True,
-            "update": True,
-            "versions_destroy": True,
-            "versions_list": True,
-            "versions_retrieve": True,
+            "update": False,
+            "versions_destroy": False,
+            "versions_list": False,
+            "versions_retrieve": False,
         },
         "ancestors_link_reach": None,
         "ancestors_link_role": None,

src/backend/core/tests/test_models_documents.py

@@ -375,8 +375,42 @@ def test_models_documents_get_abilities_owner(django_assert_num_queries):
 
     document.soft_delete()
     document.refresh_from_db()
-    expected_abilities["move"] = False
-    assert document.get_abilities(user) == expected_abilities
+    assert document.get_abilities(user) == {
+        "accesses_manage": False,
+        "accesses_view": False,
+        "ai_transform": False,
+        "ai_translate": False,
+        "attachment_upload": False,
+        "can_edit": False,
+        "children_create": False,
+        "children_list": False,
+        "collaboration_auth": False,
+        "descendants": False,
+        "cors_proxy": False,
+        "content": False,
+        "destroy": False,
+        "duplicate": False,
+        "favorite": False,
+        "invite_owner": False,
+        "link_configuration": False,
+        "link_select_options": {
+            "authenticated": ["reader", "editor"],
+            "public": ["reader", "editor"],
+            "restricted": None,
+        },
+        "mask": False,
+        "media_auth": False,
+        "media_check": False,
+        "move": False,
+        "partial_update": False,
+        "restore": True,
+        "retrieve": True,
+        "tree": True,
+        "update": False,
+        "versions_destroy": False,
+        "versions_list": False,
+        "versions_retrieve": False,
+    }
 
 
 @override_settings(