fix(audit): moderniser les accès ORM

2026-08-17 15:02:29 -04:00
parent 105a72700f
commit d7a8907953
16 changed files with 179 additions and 86 deletions
@@ -111,7 +111,7 @@ def upload_contract():
            flash(error, 'danger')
            return redirect(url_for('users.upload_contract'))

-        player = User.query.get_or_404(player_id)
+        player = db.get_or_404(User, player_id)
        player_teams = player.get_org_teams()
        team = player_teams[0] if player_teams else None

@@ -154,7 +154,7 @@ def upload_contract():
@login_required
 def upload_signed_contract(contract_id):
    """Upload a signed contract (player only)."""
-    contract = Contract.query.get_or_404(contract_id)
+    contract = db.get_or_404(Contract, contract_id)
    if not contract.can_upload_signed(current_user):
        flash(_('Only the player can upload their signed contract.'), 'danger')
        return redirect(url_for('users.list_contracts'))
@@ -182,7 +182,7 @@ def upload_signed_contract(contract_id):
@login_required
 def download_contract(contract_id):
    """Download a contract file."""
-    contract = Contract.query.get_or_404(contract_id)
+    contract = db.get_or_404(Contract, contract_id)
    if not contract.can_view(current_user):
        flash(_('You do not have permission to download this contract.'), 'danger')
        return redirect(url_for('users.list_contracts'))
@@ -197,7 +197,7 @@ def download_contract(contract_id):
@login_required
 def download_signed_contract(contract_id):
    """Download a signed contract file."""
-    contract = Contract.query.get_or_404(contract_id)
+    contract = db.get_or_404(Contract, contract_id)
    if not contract.can_view(current_user):
        flash(_('You do not have permission to download this contract.'), 'danger')
        return redirect(url_for('users.list_contracts'))