IXG Platform
Find a file
ixgadmin cdefbd010c Serve document and certificate files through a permission-checked download
Media was unreachable from either portal, which is why the certificate button on
the buyer compliance page returned page-not-found and no document row had
anything to click. The cause was structural: the portal and ops hosts proxy
location / to the app with a path prefix, so a stored /media/... URL arrives as
/portal/media/... and matches no route.

Add a download view per portal behind the same role gate as the page that links
to it — buyer-visible documents and published certificates for buyers, anything
the ops list shows for operations — resolving the stored path safely under
MEDIA_ROOT so a traversal or an absolute path is refused. Point the seven
templates that list files at the new routes.

Also add a portal-wide render sweep: nothing in the suite was fetching the ops
or portal pages, so a view could lose its template_name and 500 in front of a
user with every test still green.
2026-09-17 12:44:52 +00:00
apps Serve document and certificate files through a permission-checked download 2026-09-17 12:44:52 +00:00
docs Help centre: portal-scoped guide audiences, and links that resolve 2026-09-16 16:39:07 +00:00
dsp_platform Origin zones: draw the stored polygon on a map in the admin (Leaflet 1.9.4) 2026-09-16 16:39:07 +00:00
nginx Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
scripts Deployment hardening: HTTPS/CSRF settings, loopback-only app port, entrypoint passthrough 2026-09-16 16:39:07 +00:00
templates Serve document and certificate files through a permission-checked download 2026-09-17 12:44:52 +00:00
.dockerignore Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
.gitignore Deployment hardening: HTTPS/CSRF settings, loopback-only app port, entrypoint passthrough 2026-09-16 16:39:07 +00:00
create_agent.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
docker-compose.yml Deployment hardening: HTTPS/CSRF settings, loopback-only app port, entrypoint passthrough 2026-09-16 16:39:07 +00:00
Dockerfile Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
manage.py Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00
requirements.txt P99C: compliance automation - CoA auto-generation and EUDR due diligence 2026-08-05 13:58:39 +00:00
SESSION_CHECKPOINT.md Initial commit: IXG Platform 2026-07-29 16:48:48 +00:00