fit file download ok

rowers/views/otherviews.py

@@ -9,6 +9,32 @@ from rq import Queue
 from redis import Redis
 from rq.job import Job
 
+@login_required()
+def download_fit(request,filename=''):
+    r = getrower(request.user)
+
+
+
+    pss = PlannedSession.objects.filter(fitfile=filename)
+    print(filename,pss)
+    if len(pss) != 1:
+        raise Http404("Could not find the required file")
+
+    ps = pss[0]
+    owns = False
+    if ps.manager == request.user or request.user.rower in ps.rower.all():
+        owns = True
+
+    if not owns:
+        raise PermissionDenied("You are not allowed to download this file")
+
+    fitfile = ps.fitfile
+    response = HttpResponse(fitfile)
+    response['Content-Disposition'] = 'attachment; filename="%s"' % filename
+    response['Content-Type'] = 'application/octet-stream'
+
+    return response
+
 @login_required()
 def failed_queue_view(request):
     if not request.user.is_staff: