officejs_support_request_ui: Tolerate Events with non visible attachments in RSS

bt5/erp5_officejs_support_request_ui/SkinTemplateItem/portal_skins/erp5_officejs_support_request/SupportRequestModule_getEventList.py

@@ -58,7 +58,7 @@ for brain in portal.portal_simulation.getMovementHistoryList(
         'thumbnail': ( # XXX this is not really a thumbnail, but it's what RSS style uses for <enclosure/>
                        # Also, with this `thumbnail` it will look good for image, and most of the time
                        # users attach a screenshot of their problem.
-            event.getDefaultAggregate(portal_type=document_type_list)
+            event.getDefaultAggregate(portal_type=document_type_list, checked_permission="View")
             and event.getDefaultAggregateValue(portal_type=document_type_list).File_getDownloadUrl()
             or None)
         }

bt5/erp5_officejs_support_request_ui_test/TestTemplateItem/portal_components/test.erp5.testSupportRequest.py

@@ -548,6 +548,25 @@ class TestSupportRequestRSSSNonVisibleSupportRequest(SupportRequestRSSTestCase,
     self.assertFalse(rss.bozo)
 
 
+class TestSupportRequestRSSSNonVisibleAttachment(SupportRequestRSSTestCase, DefaultTestRSSMixin):
+  """Edge case test for support request RSS for an event (visible by user) with attachment not visible by user.
+  """
+  def afterSetUp(self):
+    super(TestSupportRequestRSSSNonVisibleAttachment, self).afterSetUp()
+    self.attached_document.manage_permission('View', ['Manager'], 0)
+    self.attached_document.reindexObject()
+    self.tic()
+
+  def _checkRSS(self, response):
+    self.assertEqual(httplib.OK, response.getStatus())
+    rss = feedparser.parse(response.getBody())
+    item, = rss.entries
+    # no enclosure
+    self.assertEqual([], [link for link in item['links'] if link['rel'] == 'enclosure'])
+    # https://pythonhosted.org/feedparser/bozo.html#advanced-bozo
+    self.assertFalse(rss.bozo)
+
+
 class TestIngestPostAsWebMessage(SupportRequestTestCase):
   """Tests ingesting HTML Post into web messages.
   """