Add server-backed file property filters

tests/test_access_provider.py

@@ -2,14 +2,16 @@ from __future__ import annotations
 
 import unittest
 
-from sqlalchemy import create_engine
+from sqlalchemy import create_engine, text
 from sqlalchemy.orm import sessionmaker
 
 from govoplan_access.backend.db.models import Account, Group, User
 from govoplan_core.core.access import PrincipalRef
+from govoplan_core.core.change_sequence import ChangeSequenceEntry
 from govoplan_core.db.base import Base
 from govoplan_files.backend.capabilities import FilesAccessService, virtual_folder_resource_id
 from govoplan_files.backend.db.models import FileAsset, FileFolder, FileShare
+from govoplan_files.backend.storage.files import count_assets_for_user, list_assets_for_user
 
 
 TENANT_ID = "tenant-1"
@@ -75,10 +77,114 @@ class FilesAccessProviderTests(unittest.TestCase):
         self.assertTrue(any(item.kind == "owner" and item.id == GROUP_ID for item in virtual_items))
         self.assertEqual("files.not_found", missing_items[0].source)
 
+    def test_file_property_filters_cover_campaign_and_audit_usage(self) -> None:
+        session = _session()
+        self.addCleanup(_close_session, session)
+        _seed_access_subjects(session)
+        assets = [
+            FileAsset(
+                id=f"file-{index}",
+                tenant_id=TENANT_ID,
+                owner_type="user",
+                owner_user_id=USER_ID,
+                display_path=f"{index}.pdf",
+                filename=f"{index}.pdf",
+            )
+            for index in range(1, 4)
+        ]
+        session.add_all([
+            *assets,
+            FileShare(
+                id="share-campaign",
+                tenant_id=TENANT_ID,
+                file_asset_id=assets[0].id,
+                target_type="campaign",
+                target_id="campaign-1",
+                permission="read",
+            ),
+        ])
+        session.commit()
+        session.execute(
+            text(
+                "INSERT INTO campaign_attachment_uses "
+                "(id, tenant_id, file_asset_id, use_stage) "
+                "VALUES (:id, :tenant_id, :file_asset_id, :use_stage)"
+            ),
+            {
+                "id": "attachment-use-1",
+                "tenant_id": TENANT_ID,
+                "file_asset_id": assets[1].id,
+                "use_stage": "sent",
+            },
+        )
+        session.commit()
+
+        linked = list_assets_for_user(
+            session,
+            tenant_id=TENANT_ID,
+            user_id=USER_ID,
+            owner_type="user",
+            owner_id=USER_ID,
+            campaign_usage="linked",
+        )
+        unlinked = list_assets_for_user(
+            session,
+            tenant_id=TENANT_ID,
+            user_id=USER_ID,
+            owner_type="user",
+            owner_id=USER_ID,
+            campaign_usage="unlinked",
+        )
+        audit_relevant = list_assets_for_user(
+            session,
+            tenant_id=TENANT_ID,
+            user_id=USER_ID,
+            owner_type="user",
+            owner_id=USER_ID,
+            audit_relevant=True,
+        )
+
+        self.assertEqual([asset.id for asset in linked], ["file-1", "file-2"])
+        self.assertEqual([asset.id for asset in unlinked], ["file-3"])
+        self.assertEqual([asset.id for asset in audit_relevant], ["file-2"])
+        self.assertEqual(
+            count_assets_for_user(
+                session,
+                tenant_id=TENANT_ID,
+                user_id=USER_ID,
+                owner_type="user",
+                owner_id=USER_ID,
+                campaign_usage="unlinked",
+            ),
+            1,
+        )
+
 
 def _session():
     engine = create_engine("sqlite:///:memory:", future=True)
-    Base.metadata.create_all(bind=engine, tables=[Account.__table__, User.__table__, Group.__table__, FileAsset.__table__, FileFolder.__table__, FileShare.__table__])
+    Base.metadata.create_all(
+        bind=engine,
+        tables=[
+            Account.__table__,
+            User.__table__,
+            Group.__table__,
+            ChangeSequenceEntry.__table__,
+            FileAsset.__table__,
+            FileFolder.__table__,
+            FileShare.__table__,
+        ],
+    )
+    with engine.begin() as connection:
+        connection.execute(
+            text(
+                "CREATE TABLE campaign_attachment_uses ("
+                "id VARCHAR(36) PRIMARY KEY, "
+                "tenant_id VARCHAR(36) NOT NULL, "
+                "file_asset_id VARCHAR(36) NOT NULL, "
+                "use_stage VARCHAR(20) NOT NULL"
+                ")"
+            )
+        )
     return sessionmaker(bind=engine, future=True)()