diff --git a/addons/website/models/ir_http.py b/addons/website/models/ir_http.py
index de6d88cbbba..c7b2dbc62ae 100644
--- a/addons/website/models/ir_http.py
+++ b/addons/website/models/ir_http.py
@@ -329,7 +329,12 @@ class Http(models.AbstractModel):
     def _xmlid_to_obj(cls, env, xmlid):
         website_id = env['website'].get_current_website()
         if website_id and website_id.theme_id:
-            obj = env['ir.attachment'].search([('key', '=', xmlid), ('website_id', '=', website_id.id)])
+            domain = [('key', '=', xmlid), ('website_id', '=', website_id.id)]
+            Attachment = env['ir.attachment']
+            if request.env.user.share:
+                domain.append(('public', '=', True))
+                Attachment = Attachment.sudo()
+            obj = Attachment.search(domain)
             if obj:
                 return obj[0]