[18.0][IMP] storage_file: improve public/private behavior

[simahawk]

Improve handling of storage backend visibility and allow serving private files directly through Odoo.

Changes summary:

storage_file

• Serve private files stored on external backends (S3, etc.) directly via the Odoo controller, removing the need for a private CDN with complex authentication. When an external backend has no base_url, the file URL falls back to the /storage.file/<slug> route.
• Use record rules to control file access: public users can only read files on public backends; internal users can read all files.
• Make backend_id editable on forms with a pre-loaded default (configurable via ir.config_parameter).
• Make is_public visible on the backend form regardless of served_by type.
• Add search filter for public/private files.

storage_image / storage_media

• Add search filter for public/private.
• Make backend_id visible (readonly) on forms with a configurable default.

storage_media_product:

• Show is_public on the product media view

NOTE: as the backend is now editable, the best is to use #622 to take care of swapping backends on change.

[SilvioC2C]

Overall LGTM, a few things to check imho

[hparfr]

Interesting, two minor remarks

[simahawk]

@SilvioC2C @hparfr thanks for your reviews. All comments addressed!

[simahawk]

Unrelated issue causing a warning

errors that caused failure (1):
2026-06-05 14:38:16,595 343 WARNING odoo py.warnings: /opt/odoo/odoo/addons/base/models/assetsbundle.py:826: DeprecationWarning: PyUnicode_FromUnicode(NULL, size) is deprecated; use PyUnicode_New() instead
  File "/opt/odoo-venv/bin/coverage", line 6, in <module>
    sys.exit(main())
  File "/opt/odoo-venv/lib/python3.10/site-packages/coverage/cmdline.py", line 1164, in main
    status = CoverageScript().command_line(argv)
  File "/opt/odoo-venv/lib/python3.10/site-packages/coverage/cmdline.py", line 853, in command_line
    return self.do_run(options, args)
  File "/opt/odoo-venv/lib/python3.10/site-packages/coverage/cmdline.py", line 1043, in do_run
    runner.run()
  File "/opt/odoo-venv/lib/python3.10/site-packages/coverage/execfile.py", line 213, in run
    exec(code, main_mod.__dict__)
  File "/opt/odoo-venv/bin/odoo", line 8, in <module>
    odoo.cli.main()
  File "/opt/odoo/odoo/cli/command.py", line 76, in main
    o.run(args)
  File "/opt/odoo/odoo/cli/server.py", line 182, in run
    main(args)
  File "/opt/odoo/odoo/cli/server.py", line 175, in main
    rc = odoo.service.server.start(preload=preload, stop=stop)
  File "/opt/odoo/odoo/service/server.py", line 1462, in start
    rc = server.run(preload, stop)
Error: Errors detected in log.
  File "/opt/odoo/odoo/service/server.py", line 627, in run
    rc = preload_registries(preload)
  File "/opt/odoo/odoo/service/server.py", line 1392, in preload_registries
    env['ir.qweb']._pregenerate_assets_bundles()
  File "/opt/odoo/odoo/addons/base/models/ir_qweb.py", line 2676, in _pregenerate_assets_bundles
    links += self._get_asset_bundle(bundle, css=False, js=True).js()
  File "/opt/odoo/odoo/addons/base/models/assetsbundle.py", line 340, in js
    content_bundle = ';\n'.join(asset.minify() for asset in self.javascripts)
  File "/opt/odoo/odoo/addons/base/models/assetsbundle.py", line 340, in <genexpr>
    content_bundle = ';\n'.join(asset.minify() for asset in self.javascripts)
  File "/opt/odoo/odoo/addons/base/models/assetsbundle.py", line 826, in minify
    return self.with_header(rjsmin(self.content))
``

[simahawk]

Trying to silent the warning...
See also odoo/odoo#191873

[simahawk]

@hparfr fine for you?

[OCA-git-bot]

This PR has the approved label and has been created more than 5 days ago. It should therefore be ready to merge by a maintainer (or a PSC member if the concerned addon has no declared maintainer). 🤖

[simahawk]

Trying to silent the warning... See also odoo/odoo#191873

I don't understand why it fails here after removing the warning bypass and not on #633.

Bah, I've restored the check log conf update.

[simahawk]

/ocabot merge minor

[OCA-git-bot]

What a great day to merge this nice PR. Let's do it!
Prepared branch 18.0-ocabot-merge-pr-623-by-simahawk-bump-minor, awaiting test results.

[OCA-git-bot]

Congratulations, your PR was merged at 3ebaef2. Thanks a lot for contributing to OCA. ❤️