for o in liste_complete.exclude(id__in=[p.id for p in preselectionne]):
data.append({'id' : o.id, 'label' : o.__unicode__(), 'devise' : o.get_tauxchange_courant().devise.id, 'suggestion' : False})
return HttpResponse(dumps(data))
-
-################################################################################
-# MEDIA PRIVE
-################################################################################
-
-def mediaserve(request, path, document_root=None, show_indexes=False):
- """
- Sécuriser l'accès aux fichiers uploadés
- """
- ct, id, filename = path.split('/')
-
- grant_ok = False
- user = request.user
- if not user.is_authenticated():
- return redirect_interdiction(request)
-
- if ct == 'poste':
- grant_ok = dae.Poste.objects.ma_region_ou_service(user).filter(id=id).count() > 0
- if ct == 'dossier':
- grant_ok = dae.Dossier.objects.ma_region_ou_service(user).filter(id=id).count() > 0
-
- if not grant_ok:
- return redirect_interdiction(request)
-
- return serve(request, path, document_root, show_indexes)
-