sort similar documents by weight, use unrestricted-user check consistently (existed before, but good to be consistent)

This brings users without an embedding backend configured to closer
parity with those who do.  Reuse the search backend to locate similar
documents and use them to provide the LLM with the better suggestion pool
to draw from

.github/workflows/ci-frontend.yml

@@ -185,16 +185,22 @@ jobs:
           flags: frontend-node-${{ matrix.node-version }}
           directory: src-ui/coverage/
   e2e-tests:
-    name: E2E Tests
+    name: "E2E Tests (${{ matrix.shard-index }}/${{ matrix.shard-count }})"
     needs: [changes, install-dependencies]
     if: needs.changes.outputs.frontend_changed == 'true'
     runs-on: ubuntu-24.04
     permissions:
       contents: read
-    container: mcr.microsoft.com/playwright:v1.62.1-noble
+    container: mcr.microsoft.com/playwright:v1.62.0-noble
     env:
       PLAYWRIGHT_BROWSERS_PATH: /ms-playwright
       PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version: [24.x]
+        shard-index: [1, 2]
+        shard-count: [2]
     steps:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -210,17 +216,6 @@ jobs:
           node-version: 24.x
           cache: 'pnpm'
           cache-dependency-path: 'src-ui/pnpm-lock.yaml'
-      - name: Set up Python
-        id: setup-python
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-        with:
-          python-version: '3.12'
-      - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
-        with:
-          version: '0.12.x'
-          enable-cache: false
-          python-version: ${{ steps.setup-python.outputs.python-version }}
       - name: Cache frontend dependencies
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
@@ -230,17 +225,8 @@ jobs:
           key: ${{ runner.os }}-frontend-${{ hashFiles('src-ui/pnpm-lock.yaml') }}
       - name: Install dependencies
         run: cd src-ui && pnpm install --frozen-lockfile
-      - name: Install backend system dependencies
-        run: |
-          apt-get update
-          apt-get install --yes --quiet --no-install-recommends libmagic1
-      - name: Install backend dependencies
-        env:
-          PYTHON_VERSION: ${{ steps.setup-python.outputs.python-version }}
-        # The frozen repository lockfile and its build hooks are trusted.
-        run: uv sync --python "${PYTHON_VERSION}" --no-dev --frozen # NOSONAR
       - name: Run Playwright E2E tests
-        run: cd src-ui && pnpm exec playwright test
+        run: cd src-ui && pnpm exec playwright test --shard ${{ matrix.shard-index }}/${{ matrix.shard-count }}
   frontend-build:
     name: Frontend Build
     needs: [changes, unit-tests, e2e-tests]

docs/changelog.md

@@ -1,26 +1,5 @@
 # Changelog
 
-## paperless-ngx 3.1.2
-
-### Bug Fixes
-
-- Fix: fix dark mode select disabled color, ensure disabled cursor on display mode dropdown [@shamoon](https://github.com/shamoon) ([#13881](https://github.com/paperless-ngx/paperless-ngx/pull/13881))
-- Fix: add disable to the drag-drop list component [@shamoon](https://github.com/shamoon) ([#13880](https://github.com/paperless-ngx/paperless-ngx/pull/13880))
-
-### Documentation
-
-- Chore: update screenshots for v3+ [@shamoon](https://github.com/shamoon) ([#13883](https://github.com/paperless-ngx/paperless-ngx/pull/13883))
-
-### All App Changes
-
-<details>
-<summary>2 changes</summary>
-
-- Fix: fix dark mode select disabled color, ensure disabled cursor on display mode dropdown [@shamoon](https://github.com/shamoon) ([#13881](https://github.com/paperless-ngx/paperless-ngx/pull/13881))
-- Fix: add disable to the drag-drop list component [@shamoon](https://github.com/shamoon) ([#13880](https://github.com/paperless-ngx/paperless-ngx/pull/13880))
-
-</details>
-
 ## paperless-ngx 3.1.1
 
 ### Bug Fixes

docs/development.md

@@ -224,19 +224,13 @@ respectively, can be run non-interactively with:
 
 ```bash
 pnpm ng test
-pnpm e2e
+pnpm playwright test
 ```
 
-The Playwright suite starts both the Angular development server and a disposable
-Paperless instance on port 8001. The instance uses SQLite, temporary data and
-media directories, and deterministic sample documents; it is removed when the
-test run finishes. This requires the back-end Python dependencies from the
-regular development setup to be installed with `uv sync`.
-
 Playwright also includes a UI which can be run with:
 
 ```bash
-pnpm e2e:ui
+pnpm playwright test --ui
 ```
 
 ### Building the frontend

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "paperless-ngx"
-version = "3.1.2"
+version = "3.1.1"
 description = "A community-supported supercharged document management system: scan, index and archive all your physical documents"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -47,7 +47,7 @@ dependencies = [
   "httpx-oauth~=0.17",
   "ijson>=3.5.1",
   "imap-tools~=1.14.0",
-  "jinja2~=3.1.6",
+  "jinja2~=3.1.5",
   "langdetect~=1.0.9",
   "llama-index-core>=0.14.23",
   "llama-index-embeddings-huggingface>=0.6.1",

src-ui/angular.json

@@ -139,17 +139,6 @@
                 }
               ]
             },
-            "e2e": {
-              "fileReplacements": [
-                {
-                  "replace": "src/environments/environment.ts",
-                  "with": "src/environments/environment.e2e.ts"
-                }
-              ],
-              "localize": [
-                "en-US"
-              ]
-            },
             "en-US": {
               "localize": [
                 "en-US"
@@ -166,9 +155,6 @@
           "configurations": {
             "production": {
               "buildTarget": "paperless-ui:build:production"
-            },
-            "e2e": {
-              "buildTarget": "paperless-ui:build:e2e"
             }
           }
         },

src-ui/e2e/admin/requests/api-settings.har

@@ -0,0 +1,194 @@
+{
+  "log": {
+    "version": "1.2",
+    "creator": {
+      "name": "Playwright",
+      "version": "1.33.0"
+    },
+    "browser": {
+      "name": "chromium",
+      "version": "113.0.5672.53"
+    },
+    "entries": [
+      {
+        "startedDateTime": "2023-05-14T07:18:59.856Z",
+        "time": 6.025,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/ui_settings/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, POST, HEAD, OPTIONS" },
+            { "name": "Content-Encoding", "value": "br" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "953" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie, Accept-Encoding" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"user\":{\"id\":2,\"username\":\"testuser\",\"is_superuser\":false,\"groups\":[]},\"settings\":{\"language\":\"\",\"bulk_edit\":{\"confirmation_dialogs\":true,\"apply_on_close\":false},\"documentListSize\":50,\"dark_mode\":{\"use_system\":true,\"enabled\":\"false\",\"thumb_inverted\":\"true\"},\"theme\":{\"color\":\"#9fbf2f\"},\"document_details\":{\"native_pdf_viewer\":false},\"date_display\":{\"date_locale\":\"\",\"date_format\":\"mediumDate\"},\"notifications\":{\"consumer_new_documents\":true,\"consumer_success\":true,\"consumer_failed\":true,\"consumer_suppress_on_dashboard\":true},\"comments_enabled\":true,\"slim_sidebar\":false,\"update_checking\":{\"enabled\":false,\"backend_setting\":\"default\"},\"saved_views\":{\"warn_on_unsaved_change\":true},\"notes_enabled\":true,\"tour_complete\":true},\"permissions\":[\"change_savedview\",\"change_schedule\",\"change_failure\",\"delete_token\",\"add_mailrule\",\"view_failure\",\"view_groupresult\",\"add_note\",\"change_taskresult\",\"view_tag\",\"view_user\",\"add_tag\",\"change_processedmail\",\"change_session\",\"view_taskattributes\",\"delete_groupresult\",\"delete_correspondent\",\"delete_schedule\",\"delete_contenttype\",\"view_chordcounter\",\"view_success\",\"delete_documenttype\",\"add_tokenproxy\",\"delete_paperlesstask\",\"add_log\",\"view_mailaccount\",\"add_uisettings\",\"view_savedview\",\"view_uisettings\",\"delete_storagepath\",\"delete_frontendsettings\",\"change_paperlesstask\",\"view_taskresult\",\"delete_processedmail\",\"view_processedmail\",\"view_session\",\"delete_chordcounter\",\"view_note\",\"delete_session\",\"view_document\",\"change_mailaccount\",\"delete_taskattributes\",\"add_groupobjectpermission\",\"view_mailrule\",\"change_savedviewfilterrule\",\"change_log\",\"change_comment\",\"add_mailaccount\",\"add_frontendsettings\",\"add_userobjectpermission\",\"delete_note\",\"view_token\",\"add_failure\",\"delete_user\",\"add_success\",\"view_ormq\",\"view_tokenproxy\",\"delete_uisettings\",\"change_groupobjectpermission\",\"add_logentry\",\"add_ormq\",\"view_frontendsettings\",\"view_schedule\",\"change_taskattributes\",\"view_documenttype\",\"view_logentry\",\"change_correspondent\",\"add_groupresult\",\"delete_groupobjectpermission\",\"change_mailrule\",\"change_permission\",\"delete_log\",\"view_userobjectpermission\",\"view_correspondent\",\"delete_document\",\"change_uisettings\",\"change_storagepath\",\"change_document\",\"delete_tokenproxy\",\"change_note\",\"delete_permission\",\"change_contenttype\",\"add_token\",\"change_success\",\"delete_logentry\",\"view_savedviewfilterrule\",\"delete_task\",\"add_savedview\",\"add_paperlesstask\",\"add_task\",\"change_documenttype\",\"add_documenttype\",\"change_token\",\"view_task\",\"view_permission\",\"change_task\",\"delete_userobjectpermission\",\"change_group\",\"add_group\",\"change_tag\",\"change_chordcounter\",\"add_storagepath\",\"delete_group\",\"add_taskattributes\",\"delete_mailaccount\",\"delete_tag\",\"add_schedule\",\"delete_failure\",\"delete_mailrule\",\"add_savedviewfilterrule\",\"change_ormq\",\"change_logentry\",\"add_taskresult\",\"view_group\",\"delete_comment\",\"add_contenttype\",\"add_document\",\"change_tokenproxy\",\"delete_success\",\"add_comment\",\"delete_ormq\",\"add_processedmail\",\"view_paperlesstask\",\"delete_savedview\",\"change_user\",\"add_session\",\"view_groupobjectpermission\",\"add_user\",\"add_correspondent\",\"delete_taskresult\",\"view_contenttype\",\"view_storagepath\",\"add_permission\",\"change_userobjectpermission\",\"delete_savedviewfilterrule\",\"change_groupresult\",\"add_chordcounter\",\"view_log\",\"view_comment\",\"change_frontendsettings\"]}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 6.025 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:18:59.990Z",
+        "time": 1.082,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/saved_views/?page=1&page_size=100000",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [
+            {
+              "name": "page",
+              "value": "1"
+            },
+            {
+              "name": "page_size",
+              "value": "100000"
+            }
+          ],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, POST, HEAD, OPTIONS" },
+            { "name": "Content-Encoding", "value": "br" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "851" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie, Accept-Encoding" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"count\":6,\"next\":null,\"previous\":null,\"all\":[8,17,7,4,11,15],\"results\":[{\"id\":8,\"name\":\"Correspondent 2\",\"show_on_dashboard\":false,\"show_in_sidebar\":false,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[{\"rule_type\":3,\"value\":\"2\"}],\"owner\":\"2\",\"user_can_change\":true},{\"id\":17,\"name\":\"In the Last Month\",\"show_on_dashboard\":false,\"show_in_sidebar\":false,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[{\"rule_type\":20,\"value\":\"created:[-1 month to now]\"}],\"owner\":\"2\",\"user_can_change\":true},{\"id\":7,\"name\":\"Inbox\",\"show_on_dashboard\":true,\"show_in_sidebar\":true,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[{\"rule_type\":6,\"value\":\"9\"}],\"owner\":\"2\",\"user_can_change\":true},{\"id\":4,\"name\":\"Recently Added\",\"show_on_dashboard\":true,\"show_in_sidebar\":true,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[],\"owner\":\"2\",\"user_can_change\":true},{\"id\":11,\"name\":\"Tag: Another Sample Tag\",\"show_on_dashboard\":false,\"show_in_sidebar\":true,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[{\"rule_type\":6,\"value\":\"4\"}],\"owner\":\"2\",\"user_can_change\":true},{\"id\":15,\"name\":\"View ASN not empty\",\"show_on_dashboard\":false,\"show_in_sidebar\":false,\"sort_field\":\"created\",\"sort_reverse\":true,\"filter_rules\":[{\"rule_type\":18,\"value\":\"false\"}],\"owner\":\"2\",\"user_can_change\":true}]}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 1.082 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:18:59.990Z",
+        "time": 0.647,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/tasks/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, HEAD, OPTIONS" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "2" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "[]"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.647 }
+      }
+    ]
+  }
+}

src-ui/e2e/admin/settings.spec.ts

@@ -1,25 +1,12 @@
 import { expect, test } from '@playwright/test'
+import path from 'node:path'
 
-test.beforeEach(async ({ page }) => {
-  await page.route('**/api/status/', (route) =>
-    route.fulfill({
-      json: {
-        database: { status: 'OK' },
-        tasks: {
-          redis_status: 'DISABLED',
-          celery_status: 'DISABLED',
-          index_status: 'OK',
-          classifier_status: 'OK',
-          sanity_check_status: 'OK',
-        },
-      },
-    })
-  )
-})
+const REQUESTS_HAR = path.join(__dirname, 'requests/api-settings.har')
 
 test('should activate / deactivate save button when settings change', async ({
   page,
 }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/settings')
   await expect(page.getByRole('button', { name: 'Save' })).toBeDisabled()
   await page.getByLabel('Use system setting').click()
@@ -28,6 +15,7 @@ test('should activate / deactivate save button when settings change', async ({
 })
 
 test('should warn on unsaved changes', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/settings')
   await page.getByLabel('Use system setting').click()
   await page.getByRole('link', { name: 'Dashboard' }).click()
@@ -39,6 +27,7 @@ test('should warn on unsaved changes', async ({ page }) => {
 })
 
 test('should apply appearance changes when set', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/settings')
   await expect(page.locator('html')).toHaveAttribute('data-bs-theme', /auto/)
   await page.getByLabel('Use system setting').click()

src-ui/e2e/backend.py

@@ -1,237 +0,0 @@
-"""Start a disposable Paperless instance for the Playwright test suite."""
-
-# ruff: noqa: INP001, T201
-
-from __future__ import annotations
-
-import datetime
-import logging
-import logging.config
-import os
-import shutil
-import sys
-import tempfile
-import time
-from pathlib import Path
-
-REPOSITORY_ROOT = Path(__file__).resolve().parents[2]
-SOURCE_ROOT = REPOSITORY_ROOT / "src"
-
-
-def configure_environment(instance_root: Path) -> None:
-    paths = {
-        "PAPERLESS_CONSUMPTION_DIR": instance_root / "consume",
-        "PAPERLESS_DATA_DIR": instance_root / "data",
-        "PAPERLESS_MEDIA_ROOT": instance_root / "media",
-        "PAPERLESS_SCRATCH_DIR": instance_root / "scratch",
-    }
-    for name, path in paths.items():
-        path.mkdir(parents=True)
-        os.environ[name] = str(path)
-    (paths["PAPERLESS_DATA_DIR"] / "index").mkdir()
-
-    os.environ.update(
-        {
-            "DJANGO_SETTINGS_MODULE": "paperless.settings",
-            "PAPERLESS_AI_ENABLED": "false",
-            "PAPERLESS_CHANNELS_BACKEND": "channels.layers.InMemoryChannelLayer",
-            "PAPERLESS_DEBUG": "true",
-            "PAPERLESS_SECRET_KEY": "playwright-only-not-a-real-secret",
-        },
-    )
-    sys.path.insert(0, str(SOURCE_ROOT))
-
-
-def seed_database() -> None:
-    from django.contrib.auth.models import User
-    from django.core.management import call_command
-    from django.utils import timezone
-
-    from documents.models import Correspondent
-    from documents.models import Document
-    from documents.models import DocumentType
-    from documents.models import Note
-    from documents.models import SavedView
-    from documents.models import SavedViewFilterRule
-    from documents.models import StoragePath
-    from documents.models import Tag
-    from documents.models import UiSettings
-
-    # Fixed credentials are safe within this disposable, localhost-only instance.
-    admin = User.objects.create_superuser(
-        username="playwright",
-        password="playwright",  # NOSONAR
-    )
-    User.objects.create_user(
-        username="viewer",
-        password="viewer",  # NOSONAR
-    )
-
-    inbox = Tag.objects.create(name="Inbox", is_inbox_tag=True, owner=admin)
-    quick_filter = Tag.objects.create(name="Another Sample Tag", owner=admin)
-    Tag.objects.create(name="TagWithPartial", owner=admin)
-    invoice = DocumentType.objects.create(name="Invoice Test", owner=admin)
-    correspondent_1 = Correspondent.objects.create(
-        name="Test Correspondent 1",
-        owner=admin,
-    )
-    correspondent_2 = Correspondent.objects.create(name="Correspondent 9", owner=admin)
-    storage_path = StoragePath.objects.create(
-        name="Testing 12",
-        path="e2e/{created_year}/{title}",
-        owner=admin,
-    )
-
-    today = timezone.localdate()
-    documents = []
-    for number in range(1, 62):
-        title = f"test document {number}" if number <= 9 else f"document {number}"
-        content = (
-            f"Playwright test content for document {number}"
-            if number <= 32
-            else f"Seeded content for document {number}"
-        )
-        created = today if number == 1 else datetime.date(2021, 1, 1)
-        if number in (2, 3):
-            created = datetime.date(2022, 12, 11)
-
-        documents.append(
-            Document(
-                title=title,
-                content=content,
-                checksum=f"{number:064x}",
-                mime_type="application/pdf",
-                filename=f"{number:07}.pdf",
-                original_filename=f"document-{number}.pdf",
-                archive_serial_number=1122 + number if number <= 6 else None,
-                created=created,
-                owner=admin,
-                document_type=invoice if number <= 3 else None,
-                correspondent=(
-                    correspondent_1
-                    if number <= 4
-                    else correspondent_2
-                    if number <= 7
-                    else None
-                ),
-                storage_path=storage_path if number <= 8 else None,
-            ),
-        )
-
-    Document.objects.bulk_create(documents)
-    originals = Path(os.environ["PAPERLESS_MEDIA_ROOT"]) / "documents" / "originals"
-    originals.mkdir(parents=True)
-    thumbnails = Path(os.environ["PAPERLESS_MEDIA_ROOT"]) / "documents" / "thumbnails"
-    thumbnails.mkdir(parents=True)
-    sample_pdf = SOURCE_ROOT / "documents" / "tests" / "samples" / "simple.pdf"
-    for document in documents:
-        shutil.copyfile(sample_pdf, originals / document.filename)
-        shutil.copyfile(
-            SOURCE_ROOT / "documents" / "resources" / "document.webp",
-            thumbnails / f"{document.pk:07}.webp",
-        )
-
-    for document in documents[:8]:
-        document.tags.add(inbox)
-    documents[0].tags.add(quick_filter)
-
-    for number in range(1, 5):
-        Note.objects.create(
-            note=f"Playwright note {number}",
-            document=documents[0],
-            user=admin,
-        )
-
-    inbox_view = SavedView.objects.create(
-        name="Inbox",
-        owner=admin,
-        sort_field="created",
-        sort_reverse=True,
-        page_size=10,
-        display_mode=SavedView.DisplayMode.TABLE,
-        display_fields=["created", "title", "tag", "documenttype"],
-    )
-    SavedViewFilterRule.objects.create(
-        saved_view=inbox_view,
-        rule_type=6,
-        value=str(inbox.pk),
-    )
-
-    UiSettings.objects.create(
-        user=admin,
-        settings={
-            "language": "",
-            "bulk_edit": {"confirmation_dialogs": True, "apply_on_close": False},
-            "documentListSize": 50,
-            "dark_mode": {
-                "use_system": True,
-                "enabled": False,
-                "thumb_inverted": True,
-            },
-            "theme": {"color": "#9fbf2f"},
-            "document_details": {"native_pdf_viewer": False},
-            "date_display": {"date_locale": "", "date_format": "mediumDate"},
-            "comments_enabled": True,
-            "slim_sidebar": False,
-            "update_checking": {"enabled": False},
-            "saved_views": {
-                "warn_on_unsaved_change": True,
-                "dashboard_views_visible_ids": [inbox_view.pk],
-                "sidebar_views_visible_ids": [inbox_view.pk],
-            },
-            "notes_enabled": True,
-            "tour_complete": True,
-        },
-    )
-
-    call_command(
-        "document_index",
-        "reindex",
-        recreate=True,
-        heap_size_mb=16,
-        verbosity=0,
-    )
-
-
-def main() -> None:
-    started = time.monotonic()
-    with tempfile.TemporaryDirectory(prefix="paperless-playwright-") as instance:
-        configure_environment(Path(instance))
-
-        os.chdir(SOURCE_ROOT)
-        print("Loading the Paperless backend...", flush=True)
-        import django
-
-        django.setup()
-
-        from django.conf import settings
-        from django.core.management import call_command
-
-        settings.CELERY_TASK_ALWAYS_EAGER = True
-        settings.CELERY_TASK_EAGER_PROPAGATES = True
-
-        print("Migrating the disposable database...", flush=True)
-        call_command("migrate", interactive=False, verbosity=0)
-        print("Seeding Playwright data...", flush=True)
-        seed_database()
-        elapsed = time.monotonic() - started
-        print(f"Playwright backend ready in {elapsed:.1f}s", flush=True)
-        settings.LOGGING["handlers"]["console"]["level"] = "WARNING"
-        settings.LOGGING["handlers"]["playwright_null"] = {
-            "class": "logging.NullHandler",
-        }
-        settings.LOGGING["loggers"]["django.server"] = {
-            "handlers": ["playwright_null"],
-            "propagate": False,
-        }
-        logging.config.dictConfig(settings.LOGGING)
-        call_command(
-            "runserver",
-            "localhost:8001",
-            use_reloader=False,
-            verbosity=1,
-        )
-
-
-if __name__ == "__main__":
-    main()

src-ui/e2e/dashboard/dashboard.spec.ts

@@ -1,13 +1,21 @@
 import { expect, test } from '@playwright/test'
+import path from 'node:path'
+
+const REQUESTS_HAR1 = path.join(__dirname, 'requests/api-dashboard1.har')
+const REQUESTS_HAR2 = path.join(__dirname, 'requests/api-dashboard2.har')
+const REQUESTS_HAR3 = path.join(__dirname, 'requests/api-dashboard3.har')
+const REQUESTS_HAR4 = path.join(__dirname, 'requests/api-dashboard4.har')
 
 test('dashboard inbox link', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR1, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await page.getByRole('link', { name: 'Documents in inbox' }).click()
-  await expect(page).toHaveURL(/tags__id__in=1/)
+  await expect(page).toHaveURL(/tags__id__in=9/)
   await expect(page.locator('pngx-document-list')).toHaveText(/8 documents/)
 })
 
 test('dashboard total documents link', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR2, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await page.getByRole('link').filter({ hasText: 'Total documents' }).click()
   await expect(page).toHaveURL(/documents/)
@@ -16,6 +24,7 @@ test('dashboard total documents link', async ({ page }) => {
 })
 
 test('dashboard saved view show all', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR3, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await page
     .locator('pngx-widget-frame')
@@ -23,11 +32,12 @@ test('dashboard saved view show all', async ({ page }) => {
     .getByRole('link', { name: 'Show all' })
     .first()
     .click()
-  await expect(page).toHaveURL(/view\/1/)
+  await expect(page).toHaveURL(/view\/7/)
   await expect(page.locator('pngx-document-list')).toHaveText(/8 documents/)
 })
 
 test('dashboard saved view document links', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR4, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await page
     .locator('pngx-widget-frame')
@@ -36,10 +46,11 @@ test('dashboard saved view document links', async ({ page }) => {
     .getByRole('link', { name: /test/ })
     .first()
     .click({ position: { x: 0, y: 0 } })
-  await expect(page).toHaveURL(/documents\/1\/details/)
+  await expect(page).toHaveURL(/documents\/310\/details/)
 })
 
 test('test slim sidebar', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR1, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await page.locator('.sidebar-slim-toggler').click()
   await expect(

src-ui/e2e/document-detail/document-detail.spec.ts

@@ -1,9 +1,14 @@
-import { expect, test } from '@playwright/test'
+import { expect, test, type WebSocketRoute } from '@playwright/test'
+import path from 'node:path'
+
+const REQUESTS_HAR = path.join(__dirname, 'requests/api-document-detail.har')
+const REQUESTS_HAR2 = path.join(__dirname, 'requests/api-document-detail2.har')
 
 test('should activate / deactivate save button when changes are saved', async ({
   page,
 }) => {
-  await page.goto('/documents/1/')
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
+  await page.goto('/documents/175/')
   await page.waitForSelector('pngx-document-detail pngx-input-text:first-child')
   await expect(page.getByTitle('Storage path', { exact: true })).toHaveText(
     /\w+/
@@ -14,7 +19,8 @@ test('should activate / deactivate save button when changes are saved', async ({
 })
 
 test('should warn on unsaved changes', async ({ page }) => {
-  await page.goto('/documents/1/')
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
+  await page.goto('/documents/175/')
   await expect(page.getByTitle('Correspondent', { exact: true })).toHaveText(
     /\w+/
   )
@@ -32,27 +38,28 @@ test('should warn on unsaved changes', async ({ page }) => {
 })
 
 test('should support tab direct navigation', async ({ page }) => {
-  await page.goto('/documents/1/details')
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
+  await page.goto('/documents/175/details')
   await expect(page.getByRole('tab', { name: 'Details' })).toHaveAttribute(
     'aria-selected',
     'true'
   )
-  await page.goto('/documents/1/content')
+  await page.goto('/documents/175/content')
   await expect(page.getByRole('tab', { name: 'Content' })).toHaveAttribute(
     'aria-selected',
     'true'
   )
-  await page.goto('/documents/1/metadata')
+  await page.goto('/documents/175/metadata')
   await expect(page.getByRole('tab', { name: 'Metadata' })).toHaveAttribute(
     'aria-selected',
     'true'
   )
-  await page.goto('/documents/1/notes')
+  await page.goto('/documents/175/notes')
   await expect(page.getByRole('tab', { name: 'Notes' })).toHaveAttribute(
     'aria-selected',
     'true'
   )
-  await page.goto('/documents/1/permissions')
+  await page.goto('/documents/175/permissions')
   await expect(page.getByRole('tab', { name: 'Permissions' })).toHaveAttribute(
     'aria-selected',
     'true'
@@ -60,7 +67,8 @@ test('should support tab direct navigation', async ({ page }) => {
 })
 
 test('should show a mobile preview', async ({ page }) => {
-  await page.goto('/documents/1/')
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
+  await page.goto('/documents/175/')
   await page.setViewportSize({ width: 400, height: 1000 })
   await expect(page.getByRole('tab', { name: 'Preview' })).toBeVisible()
   await page.getByRole('tab', { name: 'Preview' }).click()
@@ -68,7 +76,8 @@ test('should show a mobile preview', async ({ page }) => {
 })
 
 test('should show a list of notes', async ({ page }) => {
-  await page.goto('/documents/1/notes')
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
+  await page.goto('/documents/175/notes')
   await expect(page.locator('pngx-document-notes')).toBeVisible()
   await expect(
     await page.getByRole('button', {
@@ -79,25 +88,32 @@ test('should show a list of notes', async ({ page }) => {
 })
 
 test('should support quick filters', async ({ page }) => {
-  await page.goto('/documents/1/details')
+  await page.routeFromHAR(REQUESTS_HAR2, { notFound: 'fallback' })
+  await page.goto('/documents/175/details')
   await page
     .getByRole('button', { name: 'Filter documents with these Tags' })
     .click()
-  await expect(page).toHaveURL(
-    /tags__id__all=2,1&sort=created&reverse=1&page=1/
-  )
+  await expect(page).toHaveURL(/tags__id__all=4&sort=created&reverse=1&page=1/)
 })
 
 test('should finish reloading the preview after a remote document update', async ({
   page,
 }) => {
+  let resolveStatusSocket: (socket: WebSocketRoute) => void
+  const statusSocketReady = new Promise<WebSocketRoute>((resolve) => {
+    resolveStatusSocket = resolve
+  })
+  await page.routeWebSocket(/\/ws\/status\/$/, (socket) => {
+    resolveStatusSocket(socket)
+  })
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   let previewRequestCount = 0
   page.on('request', (request) => {
-    if (request.url().includes('/api/documents/1/preview/')) {
+    if (request.url().includes('/api/documents/175/preview/')) {
       previewRequestCount++
     }
   })
-  await page.goto('/documents/1/details')
+  await page.goto('/documents/175/details')
 
   await page.locator('pngx-document-detail').waitFor()
   await expect(page.getByTitle('Storage path', { exact: true })).toHaveText(
@@ -112,37 +128,27 @@ test('should finish reloading the preview after a remote document update', async
   expect(previewWasLoaded).toBe(true)
   const previewRequestsBeforeReload = previewRequestCount
 
-  await expect
-    .poll(() =>
-      page.evaluate(() => {
-        const detail = document.querySelector('pngx-document-detail')
-        return (window as any).ng.getComponent(detail).networkActive()
-      })
-    )
-    .toBe(false)
+  const statusSocket = await statusSocketReady
   const documentReloaded = page.waitForResponse(
     (response) =>
-      response.url().includes('/api/documents/1/?full_perms=true') &&
+      response.url().includes('/api/documents/175/?full_perms=true') &&
       response.request().method() === 'GET'
   )
-  await page.evaluate(() => {
-    const detail = document.querySelector('pngx-document-detail')
-    const component = (window as any).ng.getComponent(detail)
-    component.handleIncomingDocumentUpdated({
-      document_id: 1,
-      modified: '2099-07-26T20:00:00Z',
+  statusSocket.send(
+    JSON.stringify({
+      type: 'document_updated',
+      data: {
+        document_id: 175,
+        modified: '2026-07-26T20:00:00Z',
+      },
     })
-  })
+  )
   await documentReloaded
+
+  await expect(
+    page.getByText('Document reloaded with latest changes.').first()
+  ).toBeVisible()
   await expect
     .poll(() => previewRequestCount)
-    .toBeGreaterThan(previewRequestsBeforeReload)
-  await expect
-    .poll(() =>
-      page.evaluate(() => {
-        const detail = document.querySelector('pngx-document-detail')
-        return (window as any).ng.getComponent(detail).previewLoaded()
-      })
-    )
-    .toBe(true)
+    .toBeGreaterThan(previewRequestsBeforeReload + 1)
 })

src-ui/e2e/document-list/document-list.spec.ts

@@ -1,10 +1,19 @@
 import { expect, test } from '@playwright/test'
+import path from 'node:path'
+
+const REQUESTS_HAR1 = path.join(__dirname, 'requests/api-document-list1.har')
+const REQUESTS_HAR2 = path.join(__dirname, 'requests/api-document-list2.har')
+const REQUESTS_HAR3 = path.join(__dirname, 'requests/api-document-list3.har')
+const REQUESTS_HAR4 = path.join(__dirname, 'requests/api-document-list4.har')
+const REQUESTS_HAR5 = path.join(__dirname, 'requests/api-document-list5.har')
+const REQUESTS_HAR6 = path.join(__dirname, 'requests/api-document-list6.har')
 
 test('basic filtering', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR1, { notFound: 'fallback' })
   await page.goto('/documents')
   await page.getByRole('button', { name: 'Tags' }).click()
   await page.getByRole('menuitem', { name: 'Inbox' }).click()
-  await expect(page).toHaveURL(/tags__id__all=1/)
+  await expect(page).toHaveURL(/tags__id__all=9/)
   await expect(page.locator('pngx-document-list')).toHaveText(/8 documents/)
   await page.getByRole('button', { name: 'Document type' }).click()
   await page.getByRole('menuitem', { name: /^Invoice Test/ }).click()
@@ -14,27 +23,28 @@ test('basic filtering', async ({ page }) => {
   await page.getByRole('button', { name: 'Correspondent' }).click()
   await page.getByRole('menuitem', { name: 'Test Correspondent 1' }).click()
   await page.getByRole('menuitem', { name: 'Correspondent 9' }).click()
-  await expect(page).toHaveURL(/correspondent__id__in=(?:1,2|2,1)/)
+  await expect(page).toHaveURL(/correspondent__id__in=12,1/)
   await expect(page.locator('pngx-document-list')).toHaveText(/7 documents/)
   await page
     .locator('pngx-filter-editor')
     .getByTitle('Correspondent')
     .getByText('Exclude')
     .click()
-  await expect(page).toHaveURL(/correspondent__id__none=(?:1,2|2,1)/)
+  await expect(page).toHaveURL(/correspondent__id__none=12,1/)
   await expect(page.locator('pngx-document-list')).toHaveText(/54 documents/)
   // clear button
   await page.getByRole('button', { name: '2 selected', exact: true }).click()
   await expect(page.locator('pngx-document-list')).toHaveText(/61 documents/)
   await page.getByRole('button', { name: 'Storage path' }).click()
   await page.getByRole('menuitem', { name: 'Testing 12' }).click()
-  await expect(page).toHaveURL(/storage_path__id__in=1/)
+  await expect(page).toHaveURL(/storage_path__id__in=5/)
   await expect(page.locator('pngx-document-list')).toHaveText(/8 documents/)
   await page.getByRole('button', { name: 'Reset filters' }).first().click()
   await expect(page.locator('pngx-document-list')).toHaveText(/61 documents/)
 })
 
 test('text filtering', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR2, { notFound: 'fallback' })
   await page.goto('/documents')
   await page.getByRole('main').getByRole('combobox').click()
   await page.getByRole('main').getByRole('combobox').fill('test')
@@ -47,7 +57,7 @@ test('text filtering', async ({ page }) => {
   await page.getByRole('button', { name: 'Title', exact: true }).click()
   await page.getByRole('button', { name: 'Advanced search' }).click()
   await expect(page).toHaveURL(/query=test/)
-  await expect(page.locator('pngx-document-list')).toHaveText(/32 documents/)
+  await expect(page.locator('pngx-document-list')).toHaveText(/26 documents/)
   await page.getByRole('button', { name: 'Advanced search' }).click()
   await page.getByRole('button', { name: 'ASN' }).click()
   await page.getByRole('main').getByRole('combobox').nth(1).fill('1123')
@@ -70,6 +80,7 @@ test('text filtering', async ({ page }) => {
 })
 
 test('date filtering', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR3, { notFound: 'fallback' })
   await page.goto('/documents')
   await page.getByRole('button', { name: 'Dates' }).click()
   await page.locator('.ng-arrow-wrapper').first().click()
@@ -83,14 +94,15 @@ test('date filtering', async ({ page }) => {
   await page.getByRole('option', { name: 'Within 3 months' }).click()
   await page.getByLabel('Dates selected').locator('button').first().click()
   await page.getByLabel('Dates selected').locator('button').first().click()
-  const createdFrom = page.getByRole('textbox', { name: 'mm/dd/yyyy' }).first()
-  await createdFrom.fill('12/11/2022')
-  await createdFrom.press('Enter')
+  await page.getByRole('combobox', { name: 'Select month' }).selectOption('12')
+  await page.getByRole('combobox', { name: 'Select year' }).selectOption('2022')
+  await page.getByText('11', { exact: true }).click()
   await page.getByRole('button', { name: 'Title & content' }).click()
-  await expect(page.locator('pngx-document-list')).toHaveText(/3 documents/)
+  await expect(page.locator('pngx-document-list')).toHaveText(/2 documents/)
 })
 
 test('sorting', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR4, { notFound: 'fallback' })
   await page.goto('/documents')
   await page.getByRole('button', { name: 'Sort' }).click()
   await page.getByRole('button', { name: 'ASN' }).click()
@@ -128,6 +140,7 @@ test('sorting', async ({ page }) => {
 })
 
 test('change views', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR5, { notFound: 'fallback' })
   await page.goto('/documents')
   await page.locator('.btn-group > label').first().click()
   await expect(page.locator('pngx-document-list table')).toBeVisible()
@@ -138,18 +151,12 @@ test('change views', async ({ page }) => {
 })
 
 test('bulk edit', async ({ page }) => {
-  const uiSettingsLoaded = page.waitForResponse(
-    (response) => response.url().includes('/api/ui_settings/') && response.ok()
-  )
+  await page.routeFromHAR(REQUESTS_HAR6, { notFound: 'fallback' })
   await page.goto('/documents')
-  await uiSettingsLoaded
 
+  await page.locator('pngx-document-card-small').nth(0).click()
   await page
-    .locator('pngx-document-card-small .doc-img-container')
-    .nth(0)
-    .click()
-  await page
-    .locator('pngx-document-card-small .doc-img-container')
+    .locator('pngx-document-card-small')
     .nth(3)
     .click({
       modifiers: ['Shift'],
@@ -169,14 +176,8 @@ test('bulk edit', async ({ page }) => {
   )
   await page.getByRole('button', { name: 'None' }).click()
 
-  await page
-    .locator('pngx-document-card-small .doc-img-container')
-    .nth(1)
-    .click()
-  await page
-    .locator('pngx-document-card-small .doc-img-container')
-    .nth(2)
-    .click()
+  await page.locator('pngx-document-card-small').nth(1).click()
+  await page.locator('pngx-document-card-small').nth(2).click()
 
   await page.getByRole('button', { name: 'Tags' }).click()
   await page
@@ -184,26 +185,15 @@ test('bulk edit', async ({ page }) => {
     .fill('TagWithPartial')
   await page.getByRole('menuitem', { name: 'TagWithPartial' }).click()
 
+  await page.getByRole('button', { name: 'Apply' }).click()
+
   const bulkEditPromise = page.waitForRequest((request) => {
-    if (
-      !request.url().includes('/api/documents/bulk_edit/') ||
-      request.method() !== 'POST'
-    ) {
-      return false
-    }
     const postData = request.postDataJSON()
     let isValid = postData['method'] == 'modify_tags'
-    isValid =
-      isValid &&
-      [
-        ...postData['parameters']['add_tags'],
-        ...postData['parameters']['remove_tags'],
-      ].includes(3)
-    return isValid
+    isValid = isValid && postData['parameters']['add_tags'].includes(5)
+    return request.url().toString().includes('bulk_edit') && isValid
   })
 
-  await page.getByRole('button', { name: 'Apply' }).click()
-  await expect(page.getByRole('button', { name: 'Confirm' })).toBeVisible()
   await page.getByRole('button', { name: 'Confirm' }).click()
   await bulkEditPromise
 })

src-ui/e2e/permissions/global-permissions.spec.ts

@@ -1,12 +1,10 @@
 import { expect, test } from '@playwright/test'
+import path from 'node:path'
 
-test.use({
-  extraHTTPHeaders: {
-    Authorization: `Basic ${Buffer.from('viewer:viewer').toString('base64')}`,
-  },
-})
+const REQUESTS_HAR = path.join(__dirname, 'requests/api-global-permissions.har')
 
 test('should not allow user to edit settings', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(page.getByRole('link', { name: 'Settings' })).not.toBeAttached()
   await page.goto('/settings')
@@ -16,6 +14,7 @@ test('should not allow user to edit settings', async ({ page }) => {
 })
 
 test('should not allow user to view documents', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(
     page.locator('nav').getByRole('link', { name: 'Documents' })
@@ -31,6 +30,7 @@ test('should not allow user to view documents', async ({ page }) => {
 })
 
 test('should not allow user to view correspondents', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(
     page.getByRole('link', { name: 'Attributes' })
@@ -42,6 +42,7 @@ test('should not allow user to view correspondents', async ({ page }) => {
 })
 
 test('should not allow user to view tags', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(
     page.getByRole('link', { name: 'Attributes' })
@@ -53,6 +54,7 @@ test('should not allow user to view tags', async ({ page }) => {
 })
 
 test('should not allow user to view document types', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(
     page.getByRole('link', { name: 'Attributes' })
@@ -64,6 +66,7 @@ test('should not allow user to view document types', async ({ page }) => {
 })
 
 test('should not allow user to view storage paths', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(
     page.getByRole('link', { name: 'Attributes' })
@@ -75,6 +78,7 @@ test('should not allow user to view storage paths', async ({ page }) => {
 })
 
 test('should not allow user to view logs', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(page.getByRole('link', { name: 'Logs' })).not.toBeAttached()
   await page.goto('/logs')
@@ -84,6 +88,7 @@ test('should not allow user to view logs', async ({ page }) => {
 })
 
 test('should not allow user to view tasks', async ({ page }) => {
+  await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
   await page.goto('/dashboard')
   await expect(page.getByRole('link', { name: 'Tasks' })).not.toBeAttached()
   await page.goto('/tasks')

src-ui/e2e/permissions/requests/api-global-permissions.har

@@ -0,0 +1,353 @@
+{
+  "log": {
+    "version": "1.2",
+    "creator": {
+      "name": "Playwright",
+      "version": "1.33.0"
+    },
+    "browser": {
+      "name": "chromium",
+      "version": "113.0.5672.53"
+    },
+    "entries": [
+      {
+        "startedDateTime": "2023-05-14T07:16:51.455Z",
+        "time": 5.787,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/ui_settings/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, POST, HEAD, OPTIONS" },
+            { "name": "Content-Encoding", "value": "br" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "385" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie, Accept-Encoding" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"user\":{\"id\":2,\"username\":\"testuser\",\"is_superuser\":false,\"groups\":[]},\"settings\":{\"language\":\"\",\"bulk_edit\":{\"confirmation_dialogs\":true,\"apply_on_close\":false},\"documentListSize\":50,\"dark_mode\":{\"use_system\":false,\"enabled\":\"false\",\"thumb_inverted\":\"true\"},\"theme\":{\"color\":\"#9fbf2f\"},\"document_details\":{\"native_pdf_viewer\":false},\"date_display\":{\"date_locale\":\"\",\"date_format\":\"mediumDate\"},\"notifications\":{\"consumer_new_documents\":true,\"consumer_success\":true,\"consumer_failed\":true,\"consumer_suppress_on_dashboard\":true},\"comments_enabled\":true,\"slim_sidebar\":false,\"update_checking\":{\"enabled\":false,\"backend_setting\":\"default\"},\"saved_views\":{\"warn_on_unsaved_change\":true},\"notes_enabled\":true,\"tour_complete\":true},\"permissions\":[]}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 5.787 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:16:51.578Z",
+        "time": 0.566,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/tasks/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, HEAD, OPTIONS" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "2" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "[]"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.566 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:16:51.578Z",
+        "time": 0.452,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/statistics/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, HEAD, OPTIONS" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "257" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"documents_total\":61,\"documents_inbox\":8,\"inbox_tag\":9,\"document_file_type_counts\":[{\"mime_type\":\"application/pdf\",\"mime_type_count\":57},{\"mime_type\":\"text/plain\",\"mime_type_count\":3},{\"mime_type\":\"text/csv\",\"mime_type_count\":1}],\"character_count\":2407053}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.452 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:16:51.691Z",
+        "time": 0.891,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/ui_settings/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, POST, HEAD, OPTIONS" },
+            { "name": "Content-Encoding", "value": "br" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "385" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie, Accept-Encoding" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"user\":{\"id\":2,\"username\":\"testuser\",\"is_superuser\":false,\"groups\":[]},\"settings\":{\"language\":\"\",\"bulk_edit\":{\"confirmation_dialogs\":true,\"apply_on_close\":false},\"documentListSize\":50,\"dark_mode\":{\"use_system\":false,\"enabled\":\"false\",\"thumb_inverted\":\"true\"},\"theme\":{\"color\":\"#9fbf2f\"},\"document_details\":{\"native_pdf_viewer\":false},\"date_display\":{\"date_locale\":\"\",\"date_format\":\"mediumDate\"},\"notifications\":{\"consumer_new_documents\":true,\"consumer_success\":true,\"consumer_failed\":true,\"consumer_suppress_on_dashboard\":true},\"comments_enabled\":true,\"slim_sidebar\":false,\"update_checking\":{\"enabled\":false,\"backend_setting\":\"default\"},\"saved_views\":{\"warn_on_unsaved_change\":true},\"notes_enabled\":true,\"tour_complete\":true},\"permissions\":[]}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.891 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:16:51.739Z",
+        "time": 0.405,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/tasks/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, HEAD, OPTIONS" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "2" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "[]"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.405 }
+      },
+      {
+        "startedDateTime": "2023-05-14T07:16:51.739Z",
+        "time": 0.665,
+        "request": {
+          "method": "GET",
+          "url": "http://localhost:8000/api/statistics/",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Accept", "value": "application/json; version=3" },
+            { "name": "Accept-Encoding", "value": "gzip, deflate, br" },
+            { "name": "Accept-Language", "value": "en-US" },
+            { "name": "Connection", "value": "keep-alive" },
+            { "name": "Host", "value": "localhost:8000" },
+            { "name": "Origin", "value": "http://localhost:4200" },
+            { "name": "Referer", "value": "http://localhost:4200/" },
+            { "name": "Sec-Fetch-Dest", "value": "empty" },
+            { "name": "Sec-Fetch-Mode", "value": "cors" },
+            { "name": "Sec-Fetch-Site", "value": "same-site" },
+            { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.5672.53 Safari/537.36" }
+          ],
+          "queryString": [],
+          "headersSize": -1,
+          "bodySize": -1
+        },
+        "response": {
+          "status": 200,
+          "statusText": "OK",
+          "httpVersion": "HTTP/1.1",
+          "cookies": [],
+          "headers": [
+            { "name": "Access-Control-Allow-Origin", "value": "http://localhost:4200" },
+            { "name": "Allow", "value": "GET, HEAD, OPTIONS" },
+            { "name": "Content-Language", "value": "en-us" },
+            { "name": "Content-Length", "value": "257" },
+            { "name": "Content-Type", "value": "application/json" },
+            { "name": "Cross-Origin-Opener-Policy", "value": "same-origin" },
+            { "name": "Referrer-Policy", "value": "same-origin" },
+            { "name": "Vary", "value": "Accept, Accept-Language, Origin, Cookie" },
+            { "name": "X-Api-Version", "value": "3" },
+            { "name": "X-Content-Type-Options", "value": "nosniff" },
+            { "name": "X-Frame-Options", "value": "ANY" },
+            { "name": "X-Version", "value": "1.14.4" }
+          ],
+          "content": {
+            "size": -1,
+            "mimeType": "application/json",
+            "text": "{\"documents_total\":61,\"documents_inbox\":8,\"inbox_tag\":9,\"document_file_type_counts\":[{\"mime_type\":\"application/pdf\",\"mime_type_count\":57},{\"mime_type\":\"text/plain\",\"mime_type_count\":3},{\"mime_type\":\"text/csv\",\"mime_type_count\":1}],\"character_count\":2407053}"
+          },
+          "headersSize": -1,
+          "bodySize": -1,
+          "redirectURL": ""
+        },
+        "cache": {},
+        "timings": { "send": -1, "wait": -1, "receive": 0.665 }
+      }
+    ]
+  }
+}

src-ui/package.json

@@ -1,15 +1,11 @@
 {
   "name": "paperless-ngx-ui",
-  "version": "3.1.2",
+  "version": "3.1.1",
   "scripts": {
     "preinstall": "npx only-allow pnpm",
     "ng": "ng",
     "start": "ng serve",
     "build": "ng build",
-    "e2e": "playwright test",
-    "e2e:backend": "uv run --project .. --no-sync python e2e/backend.py",
-    "e2e:ui": "playwright test --ui",
-    "start:e2e": "ng serve --configuration=e2e",
     "test": "ng test",
     "lint": "ng lint"
   },

src-ui/playwright.config.ts

@@ -14,25 +14,17 @@ export default defineConfig({
   forbidOnly: !!process.env.CI,
   /* Retry on CI only */
   retries: process.env.CI ? 3 : 0,
-  /* Keep parallelism modest for the shared SQLite backend. */
-  workers: 2,
+  /* Opt out of parallel tests on CI. */
+  workers: process.env.CI ? 1 : undefined,
   /* Reporter to use. See https://playwright.dev/docs/test-reporters */
   reporter: 'html',
-  /* Run the disposable backend and local UI before starting the tests. */
-  webServer: [
-    {
-      url: 'http://localhost:8001/accounts/login/',
-      command: 'npm run e2e:backend',
-      reuseExistingServer: false,
-      timeout: 2 * 60 * 1000,
-    },
-    {
-      port,
-      command: 'npm run start:e2e',
-      reuseExistingServer: !process.env.CI,
-      timeout: 2 * 60 * 1000,
-    },
-  ],
+  /* Run your local dev server before starting the tests */
+  webServer: {
+    port,
+    command: 'pnpm run start',
+    reuseExistingServer: !process.env.CI,
+    timeout: 2 * 60 * 1000,
+  },
   /* Shared settings for all the projects below. See https://playwright.dev/docs/api/class-testoptions. */
   use: {
     /* Base URL to use in actions like `await page.goto('/')`. */

src-ui/src/app/components/app-frame/app-frame.component.html

@@ -111,7 +111,7 @@
             </h6>
             <ul class="nav flex-column mb-2" cdkDropList (cdkDropListDropped)="onDrop($event)">
               @for (view of savedViewService.sidebarViews; track view.id) {
-                <li class="nav-item app-link" cdkDrag [cdkDragDisabled]="!settingsService.organizingSidebarSavedViews() || !canSaveSettings"
+                <li class="nav-item w-100 app-link" cdkDrag [cdkDragDisabled]="!settingsService.organizingSidebarSavedViews() || !canSaveSettings"
                   cdkDragPreviewContainer="parent" cdkDragPreviewClass="navItemDrag" (cdkDragStarted)="onDragStart($event)"
                   (cdkDragEnded)="onDragEnd($event)">
                   <a class="nav-link" routerLink="view/{{view.id}}"
@@ -128,7 +128,7 @@
                     }
                   </a>
                   @if (settingsService.organizingSidebarSavedViews() && canSaveSettings) {
-                    <div class="position-absolute end-0 top-0 px-1 py-2" [class.me-n2]="slimSidebarEnabled" cdkDragHandle>
+                    <div class="position-absolute end-0 top-0 px-3 py-2" [class.me-n3]="slimSidebarEnabled" cdkDragHandle>
                       <i-bs name="grip-vertical"></i-bs>
                     </div>
                   }
@@ -332,7 +332,7 @@
             </li>
             <li class="nav-item" [class.visually-hidden]="slimSidebarEnabled">
               <div class="text-muted small d-flex align-items-center flex-wrap nav-label">
-                <div class="me-2">
+                <div class="me-3">
                   <a class="text-muted text-decoration-none" target="_blank" rel="noopener noreferrer"
                     href="https://github.com/paperless-ngx/paperless-ngx" ngbPopover="GitHub" i18n-ngbPopover
                     [disablePopover]="!slimSidebarPopoversEnabled" placement="end" container="body"
@@ -341,7 +341,7 @@
                   </a>
                 </div>
                 @if (!settingsService.updateCheckingIsSet || appRemoteVersion()) {
-                  <div class="version-check d-flex align-items-center">
+                  <div class="version-check">
                     <ng-template #updateAvailablePopContent>
                       <span class="small">Paperless-ngx {{ appRemoteVersion().version }} <ng-container i18n>is
                           available.</ng-container><br /><ng-container i18n>Click to view.</ng-container></span>

src-ui/src/app/components/common/custom-fields-query-dropdown/custom-fields-query-dropdown.component.html

@@ -1,6 +1,6 @@
 @if (useDropdown) {
   <div class="btn-group w-100" role="group" ngbDropdown #dropdown="ngbDropdown" (openChange)="onOpenChange($event)" [popperOptions]="popperOptions">
-    <button class="btn btn-sm" [ngClass]="!editing && isActive ? 'btn-primary' : 'btn-outline-primary'" id="dropdown_toggle" ngbDropdownToggle [disabled]="disabled" [aria-label]="title">
+    <button class="btn btn-sm btn-outline-primary" id="dropdown_toggle" ngbDropdownToggle [disabled]="disabled" [aria-label]="title">
       <i-bs name="{{icon}}"></i-bs><div class="d-none d-sm-inline ms-1">{{title}}</div>
       @if (isActive) {
         <pngx-clearable-badge [selected]="isActive" (cleared)="reset()"></pngx-clearable-badge>

src-ui/src/app/components/common/custom-fields-query-dropdown/custom-fields-query-dropdown.component.ts

@@ -1,6 +1,5 @@
 import {
   getLocaleNumberSymbol,
-  NgClass,
   NgTemplateOutlet,
   NumberSymbol,
 } from '@angular/common'
@@ -49,26 +48,25 @@ import { ClearableBadgeComponent } from '../clearable-badge/clearable-badge.comp
 import { DocumentLinkComponent } from '../input/document-link/document-link.component'
 
 export class CustomFieldQueriesModel {
-  private readonly _queries = signal<CustomFieldQueryElement[]>([])
+  private _queries: CustomFieldQueryElement[] = []
   private rootSubscriptions: Subscription[] = []
 
   public readonly changed = new Subject<CustomFieldQueriesModel>()
 
   public get queries(): CustomFieldQueryElement[] {
-    return this._queries()
+    return this._queries
   }
 
   public set queries(value: CustomFieldQueryElement[]) {
     this.teardownRootSubscriptions()
-    const queries = value ?? []
-    for (const element of queries) {
+    this._queries = value ?? []
+    for (const element of this._queries) {
       this.rootSubscriptions.push(
         element.changed.subscribe(() => {
           this.changed.next(this)
         })
       )
     }
-    this._queries.set(queries)
   }
 
   public clear(fireEvent = true) {
@@ -211,7 +209,6 @@ export class CustomFieldQueriesModel {
     DocumentLinkComponent,
     ReactiveFormsModule,
     NgbDatepickerModule,
-    NgClass,
     NgTemplateOutlet,
     NgSelectModule,
     NgxBootstrapIconsModule,

src-ui/src/app/components/common/input/drag-drop-select/drag-drop-select.component.html

@@ -3,7 +3,6 @@
     <div class="d-flex flex-wrap flex-row gap-2 w-100 mh-1" style="min-height: 1em;"
         cdkDropList #selectedList="cdkDropList"
         cdkDropListOrientation="mixed"
-        [cdkDropListDisabled]="disabled"
         (cdkDropListDropped)="drop($event)"
         [cdkDropListConnectedTo]="[unselectedList]">
         @for (item of selectedItems; track item.id) {
@@ -18,7 +17,6 @@
     <div class="d-flex flex-wrap flex-row gap-2 w-100" style="min-height: 1em;"
         cdkDropList #unselectedList="cdkDropList"
         cdkDropListOrientation="mixed"
-        [cdkDropListDisabled]="disabled"
         (cdkDropListDropped)="drop($event)"
         [cdkDropListConnectedTo]="[selectedList]">
         @for (item of unselectedItems; track item.id) {

src-ui/src/app/components/common/input/drag-drop-select/drag-drop-select.component.scss

@@ -1,11 +1,3 @@
 .badge {
     cursor: move;
 }
-
-.cdk-drop-list-disabled {
-    cursor: not-allowed !important;
-
-    * {
-      pointer-events: none !important;
-    }
-}

src-ui/src/app/components/common/input/drag-drop-select/drag-drop-select.component.spec.ts

@@ -98,29 +98,4 @@ describe('DragDropSelectComponent', () => {
       { id: '3', name: 'Item 3' },
     ])
   })
-
-  it('should disable drag and drop when the control is disabled', () => {
-    component.items = [
-      { id: '1', name: 'Item 1' },
-      { id: '2', name: 'Item 2' },
-    ]
-    component.writeValue(['1', '2'])
-    component.setDisabledState(true)
-    fixture.detectChanges()
-
-    expect(component.selectedList.disabled).toBe(true)
-    expect(component.unselectedList.disabled).toBe(true)
-
-    component.drop({
-      previousContainer: component.selectedList,
-      container: component.selectedList,
-      previousIndex: 0,
-      currentIndex: 1,
-    } as any)
-
-    expect(component.selectedItems).toEqual([
-      { id: '1', name: 'Item 1' },
-      { id: '2', name: 'Item 2' },
-    ])
-  })
 })

src-ui/src/app/components/common/input/drag-drop-select/drag-drop-select.component.ts

@@ -46,8 +46,6 @@ export class DragDropSelectComponent extends AbstractInputComponent<string[]> {
   }
 
   public drop(event: CdkDragDrop<string[]>) {
-    if (this.disabled) return
-
     if (
       event.previousContainer === event.container &&
       event.container === this.selectedList

src-ui/src/app/components/document-list/document-list.component.html

@@ -14,7 +14,7 @@
   </div>
   <div class="d-none d-sm-flex flex-fill me-3">
     <div class="input-group input-group-sm">
-      <span class="input-group-text bg-transparent border-0" i18n>Select:</span>
+      <span class="input-group-text border-0" i18n>Select:</span>
     </div>
     <div class="btn-group btn-group-sm flex-nowrap">
       @if (list.hasSelection) {
@@ -116,7 +116,7 @@
 
 </pngx-page-header>
 
-<div class="row sticky-top py-3 mt-n2 mt-md-n3 bg-body rounded shadow-sm">
+<div class="row sticky-top py-3 mt-n2 mt-md-n3 bg-body">
   <pngx-filter-editor [hidden]="isBulkEditing" [disabled]="isBulkEditing" [filterRules]="list.filterRules" (filterRulesChange)="onFilterRulesChange($event)" (resetFilterRules)="onFilterRulesReset($event)" [unmodifiedFilterRules]="unmodifiedFilterRules()" [selectionData]="list.selectionData" #filterEditor></pngx-filter-editor>
   <pngx-bulk-editor [hidden]="!isBulkEditing" [disabled]="!isBulkEditing"></pngx-bulk-editor>
 </div>

src-ui/src/app/components/document-list/filter-editor/filter-editor.component.spec.ts

@@ -1034,49 +1034,6 @@ describe('FilterEditorComponent', () => {
     ).toEqual([42, CustomFieldQueryOperator.Exists, 'true'])
   })
 
-  it('should reflect ingested custom field query rules in the dropdown toggle', () => {
-    const dropdown = fixture.debugElement.query(
-      By.css('pngx-custom-fields-query-dropdown')
-    )
-    expect(
-      dropdown.nativeElement.querySelector('pngx-clearable-badge')
-    ).toBeNull()
-
-    // switching to a view with a custom field query
-    component.filterRules = [
-      {
-        rule_type: FILTER_CUSTOM_FIELDS_QUERY,
-        value: '["OR",[[42,"exists","true"]]]',
-      },
-    ]
-    fixture.detectChanges()
-    expect(
-      dropdown.nativeElement.querySelector('pngx-clearable-badge')
-    ).not.toBeNull()
-    expect(
-      dropdown.nativeElement
-        .querySelector('#dropdown_toggle')
-        .classList.contains('btn-primary')
-    ).toBeTruthy()
-
-    // and back to a view without one
-    component.filterRules = [
-      {
-        rule_type: FILTER_HAS_TAGS_ALL,
-        value: '19',
-      },
-    ]
-    fixture.detectChanges()
-    expect(
-      dropdown.nativeElement.querySelector('pngx-clearable-badge')
-    ).toBeNull()
-    expect(
-      dropdown.nativeElement
-        .querySelector('#dropdown_toggle')
-        .classList.contains('btn-primary')
-    ).toBeFalsy()
-  })
-
   it('should ingest filter rules for owner', () => {
     expect(component.permissionsSelectionModel.ownerFilter).toEqual(
       OwnerFilterType.NONE

src-ui/src/app/components/manage/saved-views/saved-views.component.html

@@ -61,7 +61,7 @@
           </div>
           <div class="col">
             <label class="form-label" for="display_mode_{{view.id}}" i18n>Display as</label>
-            <select class="form-select form-control" formControlName="display_mode">
+            <select class="form-select" formControlName="display_mode">
               <option [ngValue]="DisplayMode.TABLE" i18n>Table</option>
               <option [ngValue]="DisplayMode.SMALL_CARDS" i18n>Small Cards</option>
               <option [ngValue]="DisplayMode.LARGE_CARDS" i18n>Large Cards</option>

src-ui/src/environments/environment.e2e.ts

@@ -1,13 +0,0 @@
-export const DEFAULT_APP_TITLE = 'Paperless-ngx'
-
-export const environment = {
-  production: false,
-  apiBaseUrl: 'http://localhost:8001/api/',
-  apiVersion: '10',
-  appTitle: DEFAULT_APP_TITLE,
-  tag: 'e2e',
-  version: 'E2E',
-  webSocketHost: 'localhost:8001',
-  webSocketProtocol: 'ws:',
-  webSocketBaseUrl: '/ws/',
-}

src-ui/src/environments/environment.prod.ts

@@ -8,7 +8,7 @@ export const environment = {
   apiVersion: '10', // match src/paperless/settings.py
   appTitle: DEFAULT_APP_TITLE,
   tag: 'prod',
-  version: '3.1.2',
+  version: '3.1.1',
   webSocketHost: window.location.host,
   webSocketProtocol: window.location.protocol == 'https:' ? 'wss:' : 'ws:',
   webSocketBaseUrl: base_url.pathname + 'ws/',

src-ui/src/styles.scss

@@ -47,8 +47,6 @@ $grid-breakpoints: (
 );
 
 :root {
-  --bs-border-radius: #{$border-radius};
-
   @each $name, $value in $grid-breakpoints {
     --bs-breakpoint-#{$name}: #{$value};
   }
@@ -80,12 +78,19 @@ body {
 }
 
 .btn {
-  --bs-border-radius-sm: #{$border-radius};
+  --bs-btn-border-radius: .425rem;
+  --bs-border-radius-sm: .425rem;
   font-weight: 500;
 }
 
+.form-control,
+.form-select,
+.input-group-text {
+  border-radius: .425rem;
+}
+
 .pagination, .input-group {
-  --bs-border-radius-sm: #{$border-radius};
+  --bs-border-radius-sm: .425rem;
 }
 
 @media(min-width: 768px) {
@@ -684,6 +689,10 @@ table.table {
   --bs-toast-max-width: var(--pngx-toast-max-width);
 }
 
+.alert {
+  --bs-border-radius: .425rem;
+}
+
 .alert-primary {
   --bs-alert-color: var(--bs-primary);
   --bs-alert-bg: var(--pngx-primary-faded);
@@ -815,6 +824,8 @@ code {
   --bs-accordion-bg: var(--bs-light);
   --bs-accordion-active-color: var(--bs-primary);
   --bs-accordion-active-bg: var(--pngx-bg-alt);
+  --bs-border-radius: .425rem;
+  --bs-accordion-inner-border-radius: calc(.425rem - 1px);
 }
 
 .accordion-button::after {
@@ -838,7 +849,7 @@ code {
 }
 
 /* Animate items as they're being sorted. */
-.cdk-drop-list-dragging .cdk-drag:not(.cdk-drag-preview) {
+.cdk-drop-list-dragging .cdk-drag {
   transition: transform 250ms cubic-bezier(0, 0, 0.2, 1);
 }
 

src-ui/src/theme.scss

@@ -103,8 +103,6 @@ $form-check-radio-checked-bg-image-dark: url("data:image/svg+xml,%3csvg xmlns='h
   --bs-danger-rgb: 183, 22, 49;
   --bs-body-bg: #161618;
   --bs-body-bg-rgb: 22, 22, 24;
-  --bs-secondary-bg: var(--pngx-bg-disabled);
-  --bs-secondary-bg-rgb: 36, 37, 41;
   --bs-light: #1c1c1f;
   --bs-light-rgb: 28, 28, 31;
   --bs-info: var(--pngx-bg-alt);
@@ -113,7 +111,6 @@ $form-check-radio-checked-bg-image-dark: url("data:image/svg+xml,%3csvg xmlns='h
   --bs-tertiary-bg: var(--pngx-bg-darker);
   --bs-dark-border-subtle: var(--pngx-bg-darker);
   --bs-border-color-translucent: rgba(0, 0, 0, .175); // override bs
-  --bs-box-shadow-sm: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.15); // slightly darker than bs default
 
   .text-dark, .text-light {
     color: var(--bs-body-color) !important;

src/documents/caching.py

@@ -16,9 +16,6 @@ from django.core.cache import cache
 from django.core.cache import caches
 
 from documents.models import Document
-from paperless.signed_pickle import SignedPickleError
-from paperless.signed_pickle import signed_pickle_dumps
-from paperless.signed_pickle import signed_pickle_loads
 
 if TYPE_CHECKING:
     from django.core.cache.backends.base import BaseCache
@@ -121,11 +118,9 @@ class StoredLRUCache(LRUCache):
         serialized_data = self._backend.get(self._backend_key)
         try:
             self._data = (
-                signed_pickle_loads(serialized_data)
-                if serialized_data
-                else OrderedDict()
+                pickle.loads(serialized_data) if serialized_data else OrderedDict()
             )
-        except (SignedPickleError, pickle.PickleError):
+        except pickle.PickleError:
             logger.warning(
                 "Cache exists in backend but could not be read (possibly invalid format)",
             )
@@ -137,7 +132,7 @@ class StoredLRUCache(LRUCache):
         """
         self._backend.set(
             self._backend_key,
-            signed_pickle_dumps(self._data),
+            pickle.dumps(self._data),
             self.backend_ttl,
         )
 

src/documents/classifier.py

@@ -28,9 +28,6 @@ from documents.caching import CLASSIFIER_VERSION_KEY
 from documents.caching import StoredLRUCache
 from documents.models import Document
 from documents.models import MatchingModel
-from paperless.signed_pickle import SignedPickleError
-from paperless.signed_pickle import signed_pickle_dumps
-from paperless.signed_pickle import signed_pickle_loads
 
 logger = logging.getLogger("paperless.classifier")
 
@@ -530,17 +527,10 @@ class DocumentClassifier:
         serialized_result = read_cache.get(key)
         if serialized_result is None:
             result = self.data_vectorizer.transform([self.preprocess_content(content)])
-            read_cache.set(key, signed_pickle_dumps(result), CACHE_5_MINUTES)
+            read_cache.set(key, pickle.dumps(result), CACHE_5_MINUTES)
         else:
-            try:
-                result = signed_pickle_loads(serialized_result)
-            except SignedPickleError:
-                result = self.data_vectorizer.transform(
-                    [self.preprocess_content(content)],
-                )
-                read_cache.set(key, signed_pickle_dumps(result), CACHE_5_MINUTES)
-            else:
-                read_cache.touch(key, CACHE_5_MINUTES)
+            read_cache.touch(key, CACHE_5_MINUTES)
+            result = pickle.loads(serialized_result)
         return result
 
     def predict_correspondent(self, content: str) -> int | None:

src/documents/consumer.py

@@ -25,7 +25,6 @@ from documents.data_models import DocumentMetadataOverrides
 from documents.file_handling import create_source_path_directory
 from documents.file_handling import generate_filename
 from documents.file_handling import generate_unique_filename
-from documents.file_handling import validate_path_in_root
 from documents.loggers import LoggingMixin
 from documents.models import Correspondent
 from documents.models import CustomField
@@ -696,10 +695,6 @@ class ConsumerPlugin(
                                     use_format=False,
                                 )
                             document.filename = generated_filename
-                            validate_path_in_root(
-                                document.source_path,
-                                settings.ORIGINALS_DIR,
-                            )
                             create_source_path_directory(document.source_path)
 
                             self._write(
@@ -732,10 +727,6 @@ class ConsumerPlugin(
                                         use_format=False,
                                     )
                                 document.archive_filename = generated_archive_filename
-                                validate_path_in_root(
-                                    document.archive_path,
-                                    settings.ARCHIVE_DIR,
-                                )
                                 create_source_path_directory(document.archive_path)
                                 self._write(
                                     archive_path,

src/documents/file_handling.py

@@ -1,33 +1,12 @@
-import logging
 import os
 from pathlib import Path
 
 from django.conf import settings
 
 from documents.models import Document
-from documents.templating.filepath import is_safe_relative_path
 from documents.templating.filepath import validate_filepath_template_and_render
 from documents.templating.utils import convert_format_str_to_template_format
 
-logger = logging.getLogger("paperless.filehandling")
-
-
-class UnsafeFilePathError(Exception):
-    """
-    Raised when a path generated for a document would land outside of its root.
-    """
-
-
-def validate_path_in_root(path: Path, root: Path) -> None:
-    """
-    Ensures the given absolute path is contained within root, the
-    equivalent guard for the later move.
-    """
-    if not path.resolve().is_relative_to(root.resolve()):
-        msg = f"Refusing to write file outside of root {root}: {path}."
-        logger.warning(msg)
-        raise UnsafeFilePathError(msg)
-
 
 def create_source_path_directory(source_path: Path) -> None:
     source_path.parent.mkdir(parents=True, exist_ok=True)
@@ -142,14 +121,6 @@ def format_filename(document: Document, template_str: str) -> str | None:
         "none",
     )  # backward compatibility
 
-    # Validate again after remove none
-    if not is_safe_relative_path(rendered_filename):
-        logger.warning(
-            "Filename became unsafe after placeholder removal, "
-            "falling back to default naming",
-        )
-        return None
-
     return rendered_filename
 
 

src/documents/models.py

@@ -462,11 +462,7 @@ class Document(SoftDeleteModel, ModelWithOwner):  # type: ignore[django-manager-
         """
         Returns a sanitized filename for the document, not including any paths.
         """
-        # Root owns metadata for all versions
-        context_document = (
-            self.root_document if self.root_document_id is not None else self
-        )
-        result = str(context_document)
+        result = str(self)
 
         if counter:
             result += f"_{counter:02}"

src/documents/serialisers.py

@@ -81,7 +81,6 @@ from documents.permissions import get_document_count_filter_for_user
 from documents.permissions import get_groups_with_only_permission
 from documents.permissions import has_perms_owner_aware
 from documents.permissions import permitted_document_ids
-from documents.permissions import restrict_queryset_to_visible
 from documents.permissions import set_permissions_for_object
 from documents.regex import validate_regex_pattern
 from documents.templating.filepath import validate_filepath_template_and_render
@@ -662,8 +661,6 @@ class TagSerializer(MatchingModelSerializer, OwnedObjectSerializer):
                 .select_related("owner")
                 .annotate(document_count=Count("documents", filter=filter_q))
             )
-            user = getattr(request, "user", None) if request else self.user
-            children = restrict_queryset_to_visible(children, user, "view_tag")
 
             view = self.context.get("view")
             ordering = (

src/documents/templating/filepath.py

@@ -340,7 +340,7 @@ def get_custom_fields_context(
     return field_data
 
 
-def is_safe_relative_path(value: str) -> bool:
+def _is_safe_relative_path(value: str) -> bool:
     if value == "":
         return True
 
@@ -398,7 +398,7 @@ def validate_filepath_template_and_render(
         )
         rendered_template = template.render(context)
 
-        if not is_safe_relative_path(rendered_template):
+        if not _is_safe_relative_path(rendered_template):
             logger.warning(
                 "Template rendered an unsafe path (absolute or containing traversal).",
             )

src/documents/tests/test_api_objects.py

@@ -102,7 +102,6 @@ class TestApiObjects(DirectoriesMixin, APITestCase):
             - API is called
         THEN:
             - Last correspondence date is returned only if requested for list, and for detail
-            - The date is scoped to documents the requesting user may view
         """
 
         Document.objects.create(
@@ -146,32 +145,6 @@ class TestApiObjects(DirectoriesMixin, APITestCase):
             response.data["last_correspondence"],
         )
 
-        # A newer document owned by another user must not leak through the
-        # aggregate for a non-superuser who cannot view it
-        other = User.objects.create_user(username="other")
-        Document.objects.create(
-            mime_type="application/pdf",
-            correspondent=self.c1,
-            created=datetime.date(2023, 6, 1),
-            checksum="hidden",
-            owner=other,
-        )
-
-        user = User.objects.create_user(username="regular")
-        user.user_permissions.add(
-            Permission.objects.get(codename="view_correspondent"),
-        )
-        self.client.force_authenticate(user=user)
-
-        response = self.client.get("/api/correspondents/?last_correspondence=true")
-        self.assertEqual(response.status_code, status.HTTP_200_OK)
-        result = next(r for r in response.data["results"] if r["id"] == self.c1.id)
-        self.assertIn("2022-01-02", result["last_correspondence"])
-
-        response = self.client.get(f"/api/correspondents/{self.c1.id}/")
-        self.assertEqual(response.status_code, status.HTTP_200_OK)
-        self.assertIn("2022-01-02", response.data["last_correspondence"])
-
     def test_paginated_objects_include_all_only_for_legacy_version(self) -> None:
         response_v10 = self.client.get("/api/correspondents/")
         self.assertEqual(response_v10.status_code, status.HTTP_200_OK)

src/documents/tests/test_api_trash.py

@@ -7,10 +7,9 @@ from rest_framework import status
 from rest_framework.test import APITestCase
 
 from documents.models import Document
-from documents.tests.utils import DirectoriesMixin
 
 
-class TestTrashAPI(DirectoriesMixin, APITestCase):
+class TestTrashAPI(APITestCase):
     def setUp(self) -> None:
         super().setUp()
 

src/documents/tests/test_caching.py

@@ -1,7 +1,6 @@
+import pickle
+
 from documents.caching import StoredLRUCache
-from paperless.signed_pickle import HMAC_SIZE
-from paperless.signed_pickle import signed_pickle_dumps
-from paperless.signed_pickle import signed_pickle_loads
 
 
 def test_lru_cache_entries() -> None:
@@ -43,16 +42,4 @@ def test_stored_lru_cache_key_ttl(mocker) -> None:
     key, data, timeout = mock_backend.set.call_args[0]
     assert key == "test_key"
     assert timeout == 321
-    assert signed_pickle_loads(data) == {"x": "X", "y": "Y"}
-
-
-def test_stored_lru_cache_rejects_tampered_data(mocker) -> None:
-    serialized_data = bytearray(signed_pickle_dumps({"x": "X"}))
-    serialized_data[HMAC_SIZE] ^= 0xFF
-    mock_backend = mocker.Mock()
-    mock_backend.get.return_value = bytes(serialized_data)
-    cache = StoredLRUCache("test_key", backend=mock_backend)
-
-    cache.load()
-
-    assert cache.get("x") is None
+    assert pickle.loads(data) == {"x": "X", "y": "Y"}

src/documents/tests/test_classifier.py

@@ -19,8 +19,6 @@ from documents.models import MatchingModel
 from documents.models import StoragePath
 from documents.models import Tag
 from documents.tests.utils import DirectoriesMixin
-from paperless.signed_pickle import HMAC_SIZE
-from paperless.signed_pickle import signed_pickle_dumps
 
 
 def dummy_preprocess(content: str, **kwargs):
@@ -267,27 +265,6 @@ class TestClassifier(DirectoriesMixin, TestCase):
             self.assertEqual(mock_preprocess_content.call_count, 2)
             self.assertEqual(mock_transform.call_count, 2)
 
-    def test_vectorize_recomputes_tampered_cache_entry(self) -> None:
-        cached = bytearray(signed_pickle_dumps(["cached vector"]))
-        cached[HMAC_SIZE] ^= 0xFF
-        self.classifier.data_vectorizer = mock.Mock()
-        self.classifier.data_vectorizer.transform.return_value = ["fresh vector"]
-
-        with (
-            mock.patch(
-                "documents.classifier.read_cache.get",
-                return_value=bytes(cached),
-            ),
-            mock.patch("documents.classifier.read_cache.set") as cache_set,
-            mock.patch("documents.classifier.read_cache.touch") as cache_touch,
-        ):
-            result = self.classifier._vectorize("content")
-
-        self.assertEqual(result, ["fresh vector"])
-        self.classifier.data_vectorizer.transform.assert_called_once()
-        cache_set.assert_called_once()
-        cache_touch.assert_not_called()
-
     def test_no_retrain_if_no_change(self) -> None:
         """
         GIVEN:

src/documents/tests/test_consumer.py

@@ -1179,29 +1179,6 @@ class TestConsumer(
                 produce_archive=True,
             )
 
-    @mock.patch("documents.consumer.generate_unique_filename")
-    def test_consume_refuses_to_write_outside_originals_dir(
-        self,
-        m: mock.Mock,
-    ) -> None:
-        """
-        GIVEN:
-            - Filename generation produces a path outside of the originals directory
-        WHEN:
-            - The document is consumed
-        THEN:
-            - The consumption fails and no file is written outside of the root
-        """
-        m.return_value = Path("../../pwned.pdf")
-        escaped = (settings.ORIGINALS_DIR / ".." / ".." / "pwned.pdf").resolve()
-
-        with self.get_consumer(self.get_test_file()) as consumer:
-            with self.assertRaises(ConsumerError):
-                consumer.run()
-
-        self.assertIsNotFile(escaped)
-        self.assertEqual(Document.objects.count(), 0)
-
 
 @mock.patch("documents.consumer.magic.from_file", fake_magic_from_file)
 class TestConsumerCreatedDate(DirectoriesMixin, GetConsumerMixin, TestCase):

src/documents/tests/test_document_model.py

@@ -156,40 +156,6 @@ class TestDocument(TestCase):
         )
         self.assertEqual(doc.get_public_filename(), "2020-12-25 test")
 
-    def test_version_file_name_uses_root_document_metadata(self) -> None:
-        root_correspondent = Correspondent.objects.create(name="Root correspondent")
-        version_correspondent = Correspondent.objects.create(
-            name="Version correspondent",
-        )
-        root = Document.objects.create(
-            mime_type="application/pdf",
-            title="Root title",
-            created=date(2020, 12, 25),
-            correspondent=root_correspondent,
-        )
-        version = Document.objects.create(
-            mime_type="application/pdf",
-            title="Version title",
-            created=date(1990, 1, 1),
-            correspondent=version_correspondent,
-            root_document=root,
-            version_index=1,
-        )
-
-        self.assertEqual(
-            version.get_public_filename(),
-            "2020-12-25 Root correspondent Root title.pdf",
-        )
-
-        root.title = "Updated root title"
-        root.save(update_fields=("title",))
-        version.refresh_from_db()
-
-        self.assertEqual(
-            version.get_public_filename(),
-            "2020-12-25 Root correspondent Updated root title.pdf",
-        )
-
     def test_suggestion_content_uses_latest_version_content_for_root_documents(
         self,
     ) -> None:

src/documents/tests/test_file_handling.py

@@ -16,12 +16,10 @@ from django.test import override_settings
 from django.test.utils import CaptureQueriesContext
 from django.utils import timezone
 
-from documents.file_handling import UnsafeFilePathError
 from documents.file_handling import create_source_path_directory
 from documents.file_handling import delete_empty_directories
 from documents.file_handling import generate_filename
 from documents.file_handling import generate_unique_filename
-from documents.file_handling import validate_path_in_root
 from documents.models import Correspondent
 from documents.models import CustomField
 from documents.models import CustomFieldInstance
@@ -1513,101 +1511,6 @@ class TestFilenameGeneration(DirectoriesMixin, TestCase):
         document.filename = generate_filename(document)
         self.assertEqual(document.filename, Path("XX/doc1.pdf"))
 
-    @override_settings(FILENAME_FORMAT_REMOVE_NONE=True)
-    def test_remove_none_cannot_create_traversal(self) -> None:
-        """
-        GIVEN:
-            - A storage path whose components are safe when validated, but become
-              ".." once the -none- placeholder is stripped out
-            - FILENAME_FORMAT_REMOVE_NONE is True
-        WHEN:
-            - the filename is generated for the document
-        THEN:
-            - The unsafe filename is rejected and the default naming is used
-        """
-        sp = StoragePath.objects.create(
-            name="sp1",
-            path=".-none-./.-none-./tmp/pwned",
-        )
-        document = Document.objects.create(
-            title="doc1",
-            mime_type="application/pdf",
-            storage_path=sp,
-        )
-
-        filename = generate_filename(document)
-
-        self.assertNotIn("..", filename.parts)
-        self.assertEqual(filename, Path(f"{document.pk:07}.pdf"))
-
-    @override_settings(FILENAME_FORMAT_REMOVE_NONE=True)
-    def test_remove_none_still_removes_placeholder(self) -> None:
-        """
-        GIVEN:
-            - A storage path with a placeholder for a value the document does not have
-            - FILENAME_FORMAT_REMOVE_NONE is True
-        WHEN:
-            - the filename is generated for the document
-        THEN:
-            - The placeholder is still removed as before
-        """
-        sp = StoragePath.objects.create(
-            name="sp1",
-            path="{{ correspondent }}/{{ title }}",
-        )
-        document = Document.objects.create(
-            title="doc1",
-            mime_type="application/pdf",
-            storage_path=sp,
-        )
-
-        self.assertEqual(generate_filename(document), Path("doc1.pdf"))
-
-    @override_settings(
-        FILENAME_FORMAT="{{ correspondent }}/{{ title }}/{{ doc_pk }}",
-        FILENAME_FORMAT_REMOVE_NONE=True,
-    )
-    def test_remove_none_cannot_create_traversal_from_metadata(self) -> None:
-        """
-        GIVEN:
-            - A global filename format with directory components
-            - A document whose title becomes ".." once -none- is stripped out
-            - FILENAME_FORMAT_REMOVE_NONE is True
-        WHEN:
-            - the filename is generated for the document
-        THEN:
-            - The unsafe filename is rejected and the default naming is used
-        """
-        document = Document.objects.create(
-            title=".-none-.",
-            mime_type="application/pdf",
-        )
-
-        filename = generate_filename(document)
-
-        self.assertNotIn("..", filename.parts)
-        self.assertEqual(filename, Path(f"{document.pk:07}.pdf"))
-
-    def test_validate_path_in_root(self) -> None:
-        """
-        GIVEN:
-            - A path inside of the root and a path outside of it
-        WHEN:
-            - The path is validated against the root
-        THEN:
-            - Only the path outside of the root is rejected
-        """
-        validate_path_in_root(
-            settings.ORIGINALS_DIR / "0000001.pdf",
-            settings.ORIGINALS_DIR,
-        )
-
-        with self.assertRaises(UnsafeFilePathError):
-            validate_path_in_root(
-                (settings.ORIGINALS_DIR / ".." / ".." / "pwned.pdf"),
-                settings.ORIGINALS_DIR,
-            )
-
     def test_complex_template_strings(self) -> None:
         """
         GIVEN:

src/documents/tests/test_permission_filtering_security.py

@@ -409,7 +409,6 @@ class TestBulkDownloadPermissionChecksRootDocument:
 
 
 @pytest.mark.django_db
-@pytest.mark.usefixtures("_search_index")
 class TestTrashRestorePermissionBoundary:
     def test_restore_rejects_document_without_delete_permission(
         self,

src/documents/tests/test_share_link_bundles.py

@@ -192,50 +192,6 @@ class ShareLinkBundleAPITests(DirectoriesMixin, APITestCase):
         self.assertEqual(response.status_code, status.HTTP_302_FOUND)
         self.assertIn("sharelink_notfound=1", response["Location"])
 
-    def test_share_link_missing_file_redirects(self) -> None:
-        """
-        GIVEN:
-            - A share link whose document file is missing from disk
-        WHEN:
-            - The public share link is requested anonymously
-        THEN:
-            - The user is redirected to login instead of a 500 error
-        """
-        doc = DocumentFactory.create(filename="missing-original.pdf")
-        share_link = ShareLink.objects.create(
-            slug="missingfilelink",
-            document=doc,
-            file_version=ShareLink.FileVersion.ORIGINAL,
-        )
-
-        self.client.logout()
-        response = self.client.get(f"/share/{share_link.slug}/")
-
-        self.assertEqual(response.status_code, status.HTTP_302_FOUND)
-        self.assertIn("sharelink_notfound=1", response["Location"])
-
-    def test_download_ready_bundle_missing_file_returns_503(self) -> None:
-        """
-        GIVEN:
-            - A READY bundle whose zip file is missing from disk
-        WHEN:
-            - The public share link is requested anonymously
-        THEN:
-            - A 503 is returned instead of a 500 error
-        """
-        bundle = ShareLinkBundle.objects.create(
-            slug="missingbundlefile",
-            file_version=ShareLink.FileVersion.ARCHIVE,
-            status=ShareLinkBundle.Status.READY,
-            file_path="bundles/gone.zip",
-        )
-        bundle.documents.set([self.document])
-
-        self.client.logout()
-        response = self.client.get(f"/share/{bundle.slug}/")
-
-        self.assertEqual(response.status_code, status.HTTP_503_SERVICE_UNAVAILABLE)
-
 
 class ShareLinkBundleTaskTests(DirectoriesMixin, APITestCase):
     def setUp(self) -> None:

src/documents/tests/test_tag_hierarchy.py

@@ -1,6 +1,5 @@
 from unittest import mock
 
-from django.contrib.auth.models import Permission
 from django.contrib.auth.models import User
 from rest_framework.test import APITestCase
 
@@ -15,36 +14,6 @@ from documents.signals.handlers import run_workflows
 from documents.tests.utils import DirectoriesMixin
 
 
-class TestTagHierarchyPermissions(APITestCase):
-    def test_children_only_include_visible_tags(self) -> None:
-        owner = User.objects.create_user(username="owner")
-        requester = User.objects.create_user(username="requester")
-        requester.user_permissions.add(
-            Permission.objects.get(codename="view_tag"),
-        )
-        parent = Tag.objects.create(name="Visible parent", owner=requester)
-        hidden_child = Tag.objects.create(
-            name="Hidden child",
-            owner=owner,
-            tn_parent=parent,
-        )
-        self.client.force_authenticate(user=requester)
-
-        response = self.client.get("/api/tags/")
-
-        assert response.status_code == 200
-        parent_result = next(
-            tag for tag in response.data["results"] if tag["id"] == parent.pk
-        )
-        assert parent_result["children"] == []
-        assert hidden_child.pk not in response.data.get("all", [])
-
-        response = self.client.get(f"/api/tags/{parent.pk}/")
-
-        assert response.status_code == 200
-        assert response.data["children"] == []
-
-
 class TestTagHierarchy(DirectoriesMixin, APITestCase):
     def setUp(self) -> None:
         super().setUp()

src/documents/views.py

@@ -577,19 +577,13 @@ class CorrespondentViewSet(
     def list(self, request, *args, **kwargs):
         if request.query_params.get("last_correspondence", None):
             self.queryset = self.queryset.annotate(
-                last_correspondence=Max(
-                    "documents__created",
-                    filter=self.get_document_count_filter(),
-                ),
+                last_correspondence=Max("documents__created"),
             )
         return super().list(request, *args, **kwargs)
 
     def retrieve(self, request, *args, **kwargs):
         self.queryset = self.queryset.annotate(
-            last_correspondence=Max(
-                "documents__created",
-                filter=self.get_document_count_filter(),
-            ),
+            last_correspondence=Max("documents__created"),
         )
         return super().retrieve(request, *args, **kwargs)
 
@@ -641,9 +635,7 @@ class TagViewSet(PermissionsAwareDocumentCountMixin, ModelViewSet[Tag]):
                 annotate_document_count_for_related_queryset(
                     Tag.objects.filter(
                         pk__in=descendant_pks | {t.pk for t in all_tags},
-                    )
-                    .filter(pk__in=permitted_object_ids(user, Tag, "view_tag"))
-                    .select_related("owner"),
+                    ).select_related("owner"),
                     through_model=self.document_count_through,
                     related_object_field=self._get_document_count_source_field(),
                     user=user,
@@ -4579,10 +4571,6 @@ class ShareLinkViewSet(
 class ShareLinkBundleViewSet(PassUserMixin, ModelViewSet[ShareLinkBundle]):
     model = ShareLinkBundle
 
-    # Bundles are immutable once created; rebuild via the dedicated action
-    # rather than PUT/PATCH.
-    http_method_names = ["get", "post", "delete", "head", "options"]
-
     queryset = ShareLinkBundle.objects.all()
 
     serializer_class = ShareLinkBundleSerializer
@@ -4717,15 +4705,12 @@ class SharedLinkView(View):
                 and share_link.expiration < timezone.now()
             ):
                 return HttpResponseRedirect("/accounts/login/?sharelink_expired=1")
-            try:
-                return serve_file(
-                    doc=share_link.document,
-                    use_archive=share_link.file_version == ShareLink.FileVersion.ARCHIVE
-                    and share_link.document.has_archive_version,
-                    disposition="inline",
-                )
-            except FileNotFoundError:
-                return HttpResponseRedirect("/accounts/login/?sharelink_notfound=1")
+            return serve_file(
+                doc=share_link.document,
+                use_archive=share_link.file_version == ShareLink.FileVersion.ARCHIVE
+                and share_link.document.has_archive_version,
+                disposition="inline",
+            )
 
         bundle = ShareLinkBundle.objects.filter(slug=slug).first()
         if bundle is None:
@@ -4747,11 +4732,7 @@ class SharedLinkView(View):
 
         file_path = bundle.absolute_file_path
 
-        if (
-            bundle.status == ShareLinkBundle.Status.FAILED
-            or file_path is None
-            or not file_path.exists()
-        ):
+        if bundle.status == ShareLinkBundle.Status.FAILED or file_path is None:
             return HttpResponse(
                 _(
                     "The share link bundle is unavailable.",

src/locale/af_ZA/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Afrikaans\n"
 "Language: af_ZA\n"
@@ -1610,48 +1610,48 @@ msgstr ""
 msgid "workflow runs"
 msgstr ""
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Ongeldige kleur."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Lêertipe %(type)s word nie ondersteun nie"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Ongeldige veranderlike bespeur."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1906,36 +1906,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/am_ET/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Amharic\n"
 "Language: am_ET\n"
@@ -1610,48 +1610,48 @@ msgstr ""
 msgid "workflow runs"
 msgstr ""
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr ""
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr ""
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr ""
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1906,36 +1906,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/ar_AR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Arabic\n"
 "Language: ar_SA\n"
@@ -1610,48 +1610,48 @@ msgstr ""
 msgid "workflow runs"
 msgstr ""
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "لون خاطئ."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "نوع الملف %(type)s غير مدعوم"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "اكتشاف متغير خاطئ."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1907,36 +1907,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/be_BY/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Belarusian\n"
 "Language: be_BY\n"
@@ -1610,48 +1610,48 @@ msgstr ""
 msgid "workflow runs"
 msgstr ""
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Няправільны колер."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Тып файла %(type)s не падтрымліваецца"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Выяўлена няправільная зменная."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1906,36 +1906,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/bg_BG/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Bulgarian\n"
 "Language: bg_BG\n"
@@ -1610,48 +1610,48 @@ msgstr "стартиране на работния процес"
 msgid "workflow runs"
 msgstr "стартиране на работните процеси"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Невалиден цвят."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Файловия тип %(type)s не се поддържа"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Засечена е невалидна променлива."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1907,36 +1907,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/ca_ES/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Catalan\n"
 "Language: ca_ES\n"
@@ -1610,48 +1610,48 @@ msgstr "data del flux"
 msgid "workflow runs"
 msgstr "flux corrents"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr "Permisos insuficients."
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Color Invàlid."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Tipus arxiu %(type)s no suportat"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr "ID de camp personalizat ha de ser enter: %(id)s"
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr "Camp personalitzat amb ID %(id)s no existeix"
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr "Camps personalitzats han de ser una llista d'enters o un objecte que mapegi els identificadors amb els valors."
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr "Alguns camps personalitzats no existeixen o s'han especificat dues vegades."
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Variable detectada invàlida."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr "Duplicat d'identificadors de documents no permès."
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr "Documents no trobats: %(ids)s"
@@ -1907,36 +1907,36 @@ msgstr "L'esquema d'URI '{parts.scheme}' no està permès. Esquemes permesos: {'
 msgid "Unable to parse URI {value}"
 msgstr "No s'ha pogut analitzar l'URI {value}"
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr "Invalid more_like_id"
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr "Configuració AI invàlida."
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr "Especifica només un dels següents valors: text, title_search, query o more_like_id."
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr "Permisos insuficients per compartir document %(id)s."
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr "Paquet ja s'està processant."
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr "El paquet de link encarà s'està preparant. Prova de nou més tard."
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr "El paquet d'enllaç no està disponible."
 

src/locale/cs_CZ/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Czech\n"
 "Language: cs_CZ\n"
@@ -1610,48 +1610,48 @@ msgstr "spuštění pracovního postupu"
 msgid "workflow runs"
 msgstr "spuštění pracovních postupů"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr "Nedostatečná oprávnění."
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Neplatná barva."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Typ souboru %(type)s není podporován"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr "Vlastní ID pole musí být celé číslo: %(id)s"
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr "Vlastní pole s ID %(id)s neexistuje"
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr "Vlastní pole musí být seznam celých čísel nebo ID pro mapování objektů na hodnoty."
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr "Některá vlastní pole neexistují nebo byla zadána dvakrát."
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Zjištěna neplatná proměnná."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1908,36 +1908,36 @@ msgstr "URI schéma '{parts.scheme}' není povoleno. Povolená schémata: {',\n"
 msgid "Unable to parse URI {value}"
 msgstr "Nelze zpracovat URI {value}"
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr "Nedostatečná oprávnění ke sdílení dokumentu %(id)s."
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/da_DK/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Danish\n"
 "Language: da_DK\n"
@@ -1610,48 +1610,48 @@ msgstr "workflow-kørsel"
 msgid "workflow runs"
 msgstr "workflow-kørsler"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Ugyldig farve."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Filtype %(type)s understøttes ikke"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Ugyldig variabel fundet."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1907,36 +1907,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/de_CH/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: German, Switzerland\n"
 "Language: de_CH\n"
@@ -1610,48 +1610,48 @@ msgstr "Arbeitsablauf-Ausführung"
 msgid "workflow runs"
 msgstr "Arbeitsablauf wird ausgeführt"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr "Unzureichende Berechtigungen."
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Ungültige Farbe."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Dateityp %(type)s nicht unterstützt"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr "Feld-ID eines benutzerdefinierten Felds muss eine Ganzzahl sein: %(id)s"
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr "Benutzerdefiniertes Feld mit ID %(id)s existiert nicht"
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr "Benutzerdefinierte Felder müssen eine Liste von Ganzzahlen oder ein Objekt mit Zuordnung von IDs zu Werten sein."
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr "Einige benutzerdefinierte Felder existieren nicht oder wurden zweimal angegeben."
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Ungültige Variable erkannt."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr "Doppelte Dokumentbezeichner sind nicht erlaubt."
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr "Dokumente nicht gefunden: %(ids)s"
@@ -1907,36 +1907,36 @@ msgstr "URI-Schema „{parts.scheme}“ ist nicht erlaubt. Erlaubte Schemata: {'
 msgid "Unable to parse URI {value}"
 msgstr "URI {value} kann nicht gelesen werden"
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr "Ungültige more_like_id"
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr "Ungültige KI-Konfiguration."
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr "Geben Sie nur einen von text, title_search, query, oder more_like_id an."
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr "Unzureichende Berechtigungen, um Dokument %(id)s zu teilen."
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr "Paket wird bereits verarbeitet."
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr "Das Freigabelink-Paket wird noch vorbereitet. Bitte versuchen Sie es später erneut."
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr "Das Freigabelink-Paket ist nicht verfügbar."
 

src/locale/de_DE/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: German\n"
 "Language: de_DE\n"
@@ -1610,48 +1610,48 @@ msgstr "Arbeitsablauf-Ausführung"
 msgid "workflow runs"
 msgstr "Arbeitsablauf wird ausgeführt"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr "Unzureichende Berechtigungen."
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Ungültige Farbe."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Dateityp %(type)s nicht unterstützt"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr "Zusatzfeld-ID muss eine Ganzzahl sein: %(id)s"
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr "Zusatzfeld mit ID %(id)s existiert nicht"
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr "Zusatzfelder müssen eine Liste von Ganzzahlen oder ein Objekt mit Zuordnung von IDs zu Werten sein."
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr "Einige Zusatzfelder existieren nicht oder wurden zweimal angegeben."
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Ungültige Variable erkannt."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr "Doppelte Dokumentbezeichner sind nicht erlaubt."
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr "Dokumente nicht gefunden: %(ids)s"
@@ -1907,36 +1907,36 @@ msgstr "URI-Schema „{parts.scheme}“ ist nicht erlaubt. Erlaubte Schemata: {'
 msgid "Unable to parse URI {value}"
 msgstr "URI {value} kann nicht gelesen werden"
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr "Ungültige more_like_id"
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr "Ungültige KI-Konfiguration."
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr "Zeitüberschreitung bei der KI-Backendanfrage."
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr "Geben Sie nur einen von text, title_search, query, oder more_like_id an."
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr "Unzureichende Berechtigungen, um Dokument %(id)s zu teilen."
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr "Paket wird bereits verarbeitet."
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr "Das Freigabelink-Paket wird noch vorbereitet. Bitte versuchen Sie es später erneut."
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr "Das Freigabelink-Paket ist nicht verfügbar."
 

src/locale/el_GR/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Greek\n"
 "Language: el_GR\n"
@@ -1610,48 +1610,48 @@ msgstr "εκτέλεση ροής εργασίας"
 msgid "workflow runs"
 msgstr "εκτελέσεις ροής εργασίας"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr ""
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Άκυρο χρώμα."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Ο τύπος αρχείου %(type)s δεν υποστηρίζεται"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr ""
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr ""
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr ""
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr ""
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Εντοπίστηκε μη έγκυρη μεταβλητή."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr ""
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr ""
@@ -1907,36 +1907,36 @@ msgstr ""
 msgid "Unable to parse URI {value}"
 msgstr ""
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr ""
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr ""
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr ""
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr ""
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr ""
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr ""
 

src/locale/es_ES/LC_MESSAGES/django.po

@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: paperless-ngx\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-01 14:47+0000\n"
-"PO-Revision-Date: 2026-09-01 14:48\n"
+"POT-Creation-Date: 2026-08-29 20:02+0000\n"
+"PO-Revision-Date: 2026-08-29 20:04\n"
 "Last-Translator: \n"
 "Language-Team: Spanish\n"
 "Language: es_ES\n"
@@ -1610,48 +1610,48 @@ msgstr "ejecución del flujo de trabajo"
 msgid "workflow runs"
 msgstr "ejecuciones de flujo de trabajo"
 
-#: documents/serialisers.py:524 documents/serialisers.py:878
-#: documents/serialisers.py:2830 documents/views.py:313 documents/views.py:2613
+#: documents/serialisers.py:523 documents/serialisers.py:875
+#: documents/serialisers.py:2827 documents/views.py:313 documents/views.py:2611
 #: paperless_mail/serialisers.py:156
 msgid "Insufficient permissions."
 msgstr "Permisos insuficientes."
 
-#: documents/serialisers.py:714
+#: documents/serialisers.py:711
 msgid "Invalid color."
 msgstr "Color inválido."
 
-#: documents/serialisers.py:2307
+#: documents/serialisers.py:2304
 #, python-format
 msgid "File type %(type)s not supported"
 msgstr "Tipo de fichero %(type)s no suportado"
 
-#: documents/serialisers.py:2351
+#: documents/serialisers.py:2348
 #, python-format
 msgid "Custom field id must be an integer: %(id)s"
 msgstr "El id del campo personalizado debe ser un entero: %(id)s"
 
-#: documents/serialisers.py:2358
+#: documents/serialisers.py:2355
 #, python-format
 msgid "Custom field with id %(id)s does not exist"
 msgstr "El campo personalizado con identificador %(id)s no existe"
 
-#: documents/serialisers.py:2375 documents/serialisers.py:2385
+#: documents/serialisers.py:2372 documents/serialisers.py:2382
 msgid "Custom fields must be a list of integers or an object mapping ids to values."
 msgstr "Los campos personalizados deben ser una lista de enteros o un identificador de mapeo de objetos a valores."
 
-#: documents/serialisers.py:2380
+#: documents/serialisers.py:2377
 msgid "Some custom fields don't exist or were specified twice."
 msgstr "Algunos campos personalizados no existen o fueron especificados dos veces."
 
-#: documents/serialisers.py:2527
+#: documents/serialisers.py:2524
 msgid "Invalid variable detected."
 msgstr "Variable inválida."
 
-#: documents/serialisers.py:2886
+#: documents/serialisers.py:2883
 msgid "Duplicate document identifiers are not allowed."
 msgstr "No se permiten identificadores de documento duplicados."
 
-#: documents/serialisers.py:2916 documents/views.py:4610
+#: documents/serialisers.py:2913 documents/views.py:4608
 #, python-format
 msgid "Documents not found: %(ids)s"
 msgstr "Documentos no encontrados: %(ids)s"
@@ -1907,36 +1907,36 @@ msgstr "El esquema URI '{parts.scheme}' no está permitido. Esquemas permitidos:
 msgid "Unable to parse URI {value}"
 msgstr "No se puede analizar la URI {value}"
 
-#: documents/views.py:306 documents/views.py:2610
+#: documents/views.py:306 documents/views.py:2608
 msgid "Invalid more_like_id"
 msgstr ""
 
-#: documents/views.py:1584
+#: documents/views.py:1582
 msgid "Invalid AI configuration."
 msgstr "Configuración de IA inválida."
 
-#: documents/views.py:1595
+#: documents/views.py:1593
 msgid "AI backend request timed out."
 msgstr ""
 
-#: documents/views.py:2435 documents/views.py:2756
+#: documents/views.py:2433 documents/views.py:2754
 msgid "Specify only one of text, title_search, query, or more_like_id."
 msgstr "Especifique solo uno entre text, title_search, query, o more_like_id."
 
-#: documents/views.py:4623
+#: documents/views.py:4621
 #, python-format
 msgid "Insufficient permissions to share document %(id)s."
 msgstr "Permisos insuficientes para compartir el documento %(id)s."
 
-#: documents/views.py:4669
+#: documents/views.py:4667
 msgid "Bundle is already being processed."
 msgstr "El paquete ya está siendo procesado."
 
-#: documents/views.py:4730
+#: documents/views.py:4728
 msgid "The share link bundle is still being prepared. Please try again later."
 msgstr "El paquete de enlace compartido aún está siendo preparado. Por favor, inténtalo de nuevo más tarde."
 
-#: documents/views.py:4740
+#: documents/views.py:4738
 msgid "The share link bundle is unavailable."
 msgstr "El paquete de enlace compartido no está disponible."