akvo / iwsims / #171

89%

push

coveralls-python

[#84] Store uploaded files readable so nginx stops answering 403

- storage.upload used shutil.copy2, which copied the 0600 mode of the
  tempfile.NamedTemporaryFile that FormData.save_to_file (and the seeder's
  images) write first; nginx in the frontend container could not read the
  result and answered 403, so devices failed those datapoints on every sync
  and never finished it
- Copy content only (shutil.copyfile) and chmod 0644; the explicit chmod also
  covers an overwrite, which would otherwise keep an existing file's mode
- Test: a 0600 source and an overwritten 0600 file both end up 0644
- Plan doc Part 3: cause, fix and the one-off chmod for files already stored
  (applied on test: 2,746 files); re-run it after deploying

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

5834 of 6741 branches covered (86.55%)

Branch coverage included in aggregate %.

10745 of 11965 relevant lines covered (89.8%)

0.9 hits per line