🔒️(back) don't allow an owner to change or delete other owner accesses

[lunika]

Purpose

Owner accesses can not be modified or deleted from other owners. Only current owner can modify and delete its own access.

Proposal

• 🔒️(back) don't allow an owner to change or delete other owner accesses

[Copilot]

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

Comments suppressed due to low confidence (2)

src/backend/core/tests/documents/test_api_document_accesses.py:1042

• Consider adding tests for team ownership deletion once team-based owner access is implemented to ensure complete coverage of all access control scenarios.

pytest.skip("Implement when team ownership is implemented")

src/backend/core/models.py:1118

• [nitpick] Consider adding parentheses in the can_delete condition to enhance readability and clarify the intended logic.

# An owner can only delete its own access if other owners exist

[lunika]

As discuss with @rl-83 the issue is not in the back application. The business logic implemented in the back application is the one expected. The front does not reflect the abilities return by the access API.