vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Merge pull request #20856 from resilient-tech/perf-private-file

Browse source
This commit is contained in:
Ritwik Puri 2023-05-05 00:46:16 +05:30 • committed by GitHub
commit f5ba787f4b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
frappe/utils/response.py
View file

@ -224,16 +224,16 @@ def download_private_file(path: str) -> Response:
"""Checks permissions and sends back private file"""
can_access = False
files = frappe.get_all("File", filters={"file_url": path}, pluck="name")
files = frappe.get_all("File", filters={"file_url": path}, fields="*")
# this file might be attached to multiple documents
# if the file is accessible from any one of those documents
# then it should be downloadable
for fname in files:
file: "File" = frappe.get_doc("File", fname)
if can_access := file.is_downloadable():
for file_data in files:
file: "File" = frappe.get_doc(doctype="File", **file_data)
if file.is_downloadable():
break
if not can_access:
else:
raise Forbidden(_("You don't have permission to access this file"))
make_access_log(doctype="File", document=file.name, file_type=os.path.splitext(path)[-1][1:])