- piece = get_object_or_404(application.EmployePiece, fichier=filename)
- return sendfile(request, piece.fichier.path)
- if model == 'poste':
- piece = get_object_or_404(application.PostePiece, fichier=filename)
- if application.Poste.objects.ma_region_ou_service(request.user).filter(id=piece.poste_id).exists():
- return sendfile(request, piece.fichier.path)
- else:
- return redirect_interdiction(request)
- if model == 'dossier':
- piece = get_object_or_404(application.DossierPiece, fichier=filename)
- if application.Dossier.objects.ma_region_ou_service(request.user).filter(id=piece.dossier_id).exists():
- return sendfile(request, piece.fichier.path)
- else:
- return redirect_interdiction(request)
-
+ for piece in application.EmployePiece.objects.filter(fichier=filename):
+ if piece.fichier.name == filename:
+ return sendfile(request, piece.fichier.path)
+ raise Http404
+ elif model == 'poste':
+ for piece in application.PostePiece.objects.filter(fichier=filename):
+ if piece.fichier.name == filename:
+ if application.Poste.objects \
+ .ma_region_ou_service(request.user) \
+ .filter(id=piece.poste_id).exists():
+ return sendfile(request, piece.fichier.path)
+ else:
+ return redirect_interdiction(request)
+ raise Http404
+ elif model == 'dossier':
+ for piece in application.DossierPiece.objects.filter(fichier=filename):
+ if piece.fichier.name == filename:
+ if application.Dossier.objects \
+ .ma_region_ou_service(request.user) \
+ .filter(id=piece.dossier_id).exists():
+ return sendfile(request, piece.fichier.path)
+ else:
+ return redirect_interdiction(request)
+ raise Http404