From b9e9abee90c35444b76e17050ad2d6b34d39204d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Fri, 5 Dec 2025 12:01:58 +0100
Subject: [PATCH 01/17] =?UTF-8?q?Nuxt=20:=20suppression=20de=20code=20comm?=
 =?UTF-8?q?ent=C3=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/pages/frise/_procedureId/invite.vue | 17 -----------------
 1 file changed, 17 deletions(-)

diff --git a/nuxt/pages/frise/_procedureId/invite.vue b/nuxt/pages/frise/_procedureId/invite.vue
index 7b48fc4fb..9b7dfb274 100644
--- a/nuxt/pages/frise/_procedureId/invite.vue
+++ b/nuxt/pages/frise/_procedureId/invite.vue
@@ -1,23 +1,6 @@
 <template>
   <v-container>
-    <!-- <v-row v-if="collectivite">
-      <v-col cols="12" class="pb-0 mt-6">
-        <nuxt-link :to="backToCollectivite" class="text-decoration-none d-flex align-center">
-          <v-icon color="primary" small class="mr-2">
-            {{ icons.mdiChevronLeft }}
-          </v-icon>
-          {{ collectivite.intitule }}
-        </nuxt-link>
-      </v-col>
-    </v-row> -->
     <v-row v-if="collectivite && procedure">
-      <!-- <v-col cols="12">
-        <div class="d-flex align-center">
-          <h1 class="text-h1">
-            Nouvelle procédure
-          </h1>
-        </div>
-      </v-col> -->
     </v-row>
     <v-row v-if="loaded">
       <v-col cols="12">

From b612ea40eb4fbe51c18a0fa965543ac41b2af966 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Tue, 2 Dec 2025 17:06:50 +0100
Subject: [PATCH 02/17] =?UTF-8?q?Django=20:=20ajout=20des=20mod=C3=A8les?=
 =?UTF-8?q?=20User=20et=20Profile?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Documentation du schéma actuel de la base de données.
Ajout d'une application pour distinguer la gestion des
utilisateurs du reste de l'applicatif.
Ajout des entrées dans l'interface d'administration Django.
---
 django/core/settings.py                 |   1 +
 django/tests/conftest.py                |  12 ++
 django/tests/users/__init__.py          |   0
 django/tests/users/factories.py         |  15 +++
 django/tests/users/test_models.py       |  30 +++++
 django/users/__init__.py                |   0
 django/users/admin.py                   |  34 +++++
 django/users/apps.py                    |   7 +
 django/users/enums.py                   |  37 ++++++
 django/users/migrations/0001_initial.py | 165 ++++++++++++++++++++++++
 django/users/migrations/__init__.py     |   0
 django/users/models.py                  | 108 ++++++++++++++++
 12 files changed, 409 insertions(+)
 create mode 100644 django/tests/users/__init__.py
 create mode 100644 django/tests/users/factories.py
 create mode 100644 django/tests/users/test_models.py
 create mode 100644 django/users/__init__.py
 create mode 100644 django/users/admin.py
 create mode 100644 django/users/apps.py
 create mode 100644 django/users/enums.py
 create mode 100644 django/users/migrations/0001_initial.py
 create mode 100644 django/users/migrations/__init__.py
 create mode 100644 django/users/models.py

diff --git a/django/core/settings.py b/django/core/settings.py
index 25393e315..ba33d39b5 100644
--- a/django/core/settings.py
+++ b/django/core/settings.py
@@ -37,6 +37,7 @@
     "django_extensions",
     "debug_toolbar",
     "core",
+    "users",
 ]
 
 MIDDLEWARE = [
diff --git a/django/tests/conftest.py b/django/tests/conftest.py
index 43da56ef5..0082ced21 100644
--- a/django/tests/conftest.py
+++ b/django/tests/conftest.py
@@ -1,6 +1,8 @@
 import pytest
 from django.db import connection
 
+from users.models import User
+
 
 @pytest.fixture(scope="session")
 def django_db_setup(django_db_setup, django_db_blocker, django_db_createdb):  # noqa: ANN001, ANN201, ARG001
@@ -24,6 +26,16 @@ def django_db_setup(django_db_setup, django_db_blocker, django_db_createdb):  #
             if not model._meta.managed and not model._meta.db_table.startswith("view_")  # noqa: SLF001
         ]
 
+        # La table `users` est dans le schéma `auth` qui n'est pas listée dans connection.instrospection.
+        # Traitons-la différemment des autres modèles.
+        # Voir users/test_models.py
+        with connection.schema_editor() as schema_editor:
+            schema_editor.execute("CREATE SCHEMA auth;")
+            schema_editor.create_model(User)
+        unmanaged_models_except_views = [
+            model for model in unmanaged_models_except_views if model is not User
+        ]
+
         for model in unmanaged_models_except_views:
             with connection.schema_editor() as schema_editor:
                 schema_editor.create_model(model)
diff --git a/django/tests/users/__init__.py b/django/tests/users/__init__.py
new file mode 100644
index 000000000..e69de29bb
diff --git a/django/tests/users/factories.py b/django/tests/users/factories.py
new file mode 100644
index 000000000..7cd834233
--- /dev/null
+++ b/django/tests/users/factories.py
@@ -0,0 +1,15 @@
+import uuid
+from typing import Any
+
+from tests.factories import _Auto
+from users.models import Profile, User
+
+Auto: Any = _Auto()
+
+
+def create_user_and_profile(
+    *, email: str = Auto, other_poste: list = Auto
+) -> tuple[User, Profile]:
+    user = User.objects.create(id=uuid.uuid4(), email=email)
+    profile = Profile.objects.create(user=user, other_poste=other_poste)
+    return user, profile
diff --git a/django/tests/users/test_models.py b/django/tests/users/test_models.py
new file mode 100644
index 000000000..3ce67941d
--- /dev/null
+++ b/django/tests/users/test_models.py
@@ -0,0 +1,30 @@
+import uuid
+
+import pytest
+
+from users.models import Profile, User
+
+from .factories import create_user_and_profile
+
+
+@pytest.mark.django_db
+def test_user_creation() -> None:
+    """La table users n'est pas dans le schéma par défaut (public) mais dans `auth`.
+
+    Les schémas PostgreSQL ne semblent pas être très bien pris en charge nativement par Django.
+    Nous aurions probablement pu mettre en place un routeur de DB (Database Router) pour rester
+    en cohérence avec l'architecture de Django mais cette table disparaîtra avec Supabase.
+    Elle existe uniquement car Supabase l'utilise dans sa fonctionnalité SSO.
+    Pour le moment, et uniquement pour les tests, créons un schéma `auth`.
+    """
+    User.objects.create(id=uuid.uuid4(), email="georges-eugene@haussmann.com")
+    assert User.objects.count() == 1
+
+
+@pytest.mark.django_db
+def test_profile_creation() -> None:
+    _, profile = create_user_and_profile(
+        email="georges-eugene@haussmann.com", other_poste=["rédacteur", "maire"]
+    )
+    assert Profile.objects.count() == 1
+    assert profile.other_poste == ["rédacteur", "maire"]
diff --git a/django/users/__init__.py b/django/users/__init__.py
new file mode 100644
index 000000000..e69de29bb
diff --git a/django/users/admin.py b/django/users/admin.py
new file mode 100644
index 000000000..970abbd8c
--- /dev/null
+++ b/django/users/admin.py
@@ -0,0 +1,34 @@
+# ruff: noqa: ANN001, ARG002
+from typing import Literal
+
+from django.contrib import admin
+
+from users.models import Profile, User
+
+
+@admin.register(Profile)
+class ProfileAdmin(admin.ModelAdmin):
+    readonly_fields = ("user",)
+    search_fields = ("email",)
+    raw_id_fields = ("collectivite",)
+    list_filter = ("poste", "side")
+
+    def has_add_permission(self, request) -> Literal[False]:
+        return False
+
+    def has_delete_permission(self, request, obj=None) -> Literal[False]:
+        return False
+
+
+@admin.register(User)
+class UserAdmin(admin.ModelAdmin):
+    """Les données sont gérées par Supabase."""
+
+    def has_delete_permission(self, request, obj=None) -> Literal[False]:
+        return False
+
+    def has_change_permission(self, request, obj=None) -> Literal[False]:
+        return False
+
+    def has_add_permission(self, request) -> Literal[False]:
+        return False
diff --git a/django/users/apps.py b/django/users/apps.py
new file mode 100644
index 000000000..80982c68d
--- /dev/null
+++ b/django/users/apps.py
@@ -0,0 +1,7 @@
+from django.apps import AppConfig
+
+
+class UsersConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "users"
+    verbose_name = "Utilisateurs"
diff --git a/django/users/enums.py b/django/users/enums.py
new file mode 100644
index 000000000..68ddba870
--- /dev/null
+++ b/django/users/enums.py
@@ -0,0 +1,37 @@
+from django.db import models
+
+
+class ProfileSideType(models.TextChoices):
+    ETAT = "etat", "État"
+    COLLECTIVITE = "collectivite", "Collectivité"
+
+
+class PosteType(models.TextChoices):
+    # Postes État
+    # https://github.com/MTES-MCT/Docurba/blob/2050c8dc046f9c8414ebe9aaf72a3f3cdbc623d2/nuxt/plugins/utils.js#L58
+    DDT = "ddt", "DDT(M)/DEAL"
+    DREAL = "dreal", "DREAL"
+
+    # Postes Collectivités
+    BE = "be", "Bureau d'études"
+    ELU = "elu", "Collectivité, Élu·e"
+    EMPLOYE_MAIRIE = "employe_mairie", "Collectivité, Technicien·ne ou employé·e"
+    AGENCE_URBA = "agence_urba", "Agence d'urbanisme"
+    AUTRE = "autre", "Autre"
+
+
+class RoleType(models.TextChoices):
+    # Nuxt :
+    # Côté collectivité, c'est un InputField qui ne valide pas l'input.
+    # A contrario, côté État, c'est un TextChoices avec un menu déroulant. U_U
+    # https://github.com/MTES-MCT/Docurba/blob/2050c8dc046f9c8414ebe9aaf72a3f3cdbc623d2/nuxt/plugins/utils.js#L62
+    # Cela étant, il semblerait que les utilisateurs n'aient pas été très inspirés car seules 33
+    # valeurs différentes figurent en base (en excluant les comptes tests), dont des "PPA".
+    # Rôles état
+    CHEF_UNITE = "chef_unite", "Chef·fe d'unité/de bureau/de service et adjoint·e"
+    REDACTEUR_PAC = "redacteur_pac", "Rédacteur·ice de PAC"
+    SUIVI_PROCEDURES = (
+        "suivi_procedures",
+        "Chargé·e de l'accompagnement des collectivités",
+    )
+    REFERENT_SUDOCUH = "referent_sudocuh", "Référent·e Sudocuh"
diff --git a/django/users/migrations/0001_initial.py b/django/users/migrations/0001_initial.py
new file mode 100644
index 000000000..eead42935
--- /dev/null
+++ b/django/users/migrations/0001_initial.py
@@ -0,0 +1,165 @@
+# ruff: noqa: RUF012
+# Generated by Django 5.1.5 on 2025-12-12 09:41
+
+import django.contrib.postgres.fields
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    initial = True
+
+    dependencies = []
+
+    operations = [
+        migrations.CreateModel(
+            name="User",
+            fields=[
+                ("id", models.UUIDField(primary_key=True, serialize=False)),
+                (
+                    "email",
+                    models.EmailField(blank=True, max_length=254, verbose_name="Email"),
+                ),
+            ],
+            options={
+                "db_table": '"auth"."users"',
+                "managed": False,
+                "verbose_name": "utilisateur",
+            },
+        ),
+        migrations.CreateModel(
+            name="Profile",
+            fields=[
+                (
+                    "user",
+                    models.OneToOneField(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        primary_key=True,
+                        serialize=False,
+                        to="users.user",
+                        verbose_name="Utilisateur",
+                    ),
+                ),
+                (
+                    "created_at",
+                    models.DateTimeField(
+                        auto_now_add=True, verbose_name="Date de création"
+                    ),
+                ),
+                ("firstname", models.CharField(blank="True", verbose_name="Prénom")),
+                ("lastname", models.CharField(blank="True", verbose_name="Nom")),
+                (
+                    "email",
+                    models.EmailField(blank=True, max_length=254, verbose_name="Email"),
+                ),
+                (
+                    "poste",
+                    models.CharField(
+                        blank=True,
+                        choices=[
+                            ("ddt", "DDT(M)/DEAL"),
+                            ("dreal", "DREAL"),
+                            ("be", "Bureau d'études"),
+                            ("elu", "Collectivité, Élu·e"),
+                            (
+                                "employe_mairie",
+                                "Collectivité, Technicien·ne ou employé·e",
+                            ),
+                            ("agence_urba", "Agence d'urbanisme"),
+                            ("autre", "Autre"),
+                        ],
+                        verbose_name="Poste",
+                    ),
+                ),
+                (
+                    "other_poste",
+                    django.contrib.postgres.fields.ArrayField(
+                        base_field=models.CharField(
+                            blank=True,
+                            choices=[
+                                (
+                                    "chef_unite",
+                                    "Chef·fe d'unité/de bureau/de service et adjoint·e",
+                                ),
+                                ("redacteur_pac", "Rédacteur·ice de PAC"),
+                                (
+                                    "suivi_procedures",
+                                    "Chargé·e de l'accompagnement des collectivités",
+                                ),
+                                ("referent_sudocuh", "Référent·e Sudocuh"),
+                            ],
+                        ),
+                        blank=True,
+                        size=10,
+                        verbose_name="Role(s)",
+                    ),
+                ),
+                (
+                    "departement",
+                    models.CharField(blank=True, verbose_name="Département"),
+                ),
+                ("tel", models.CharField(blank=True, verbose_name="Téléphone")),
+                (
+                    "verified",
+                    models.BooleanField(default=False, verbose_name="Vérifié"),
+                ),
+                (
+                    "side",
+                    models.CharField(
+                        blank=True,
+                        choices=[("etat", "État"), ("collectivite", "Collectivité")],
+                        verbose_name="Type",
+                    ),
+                ),
+                (
+                    "region",
+                    models.CharField(
+                        blank=True,
+                        db_comment="Si l'utilisateur est une DREAL ou une PPA : région de son périmètre. La colonne peut être remplie pour les autres types.",
+                        verbose_name="Région",
+                    ),
+                ),
+                (
+                    "no_signup",
+                    models.BooleanField(
+                        db_comment="Si l'utilisateur passe par un depot d'acte, il est autorisé à mettre uniquement son email. Dans ce cas l'utilisateur n'a pas de compte Docurba, et no_signup sera à TRUE.",
+                        default=False,
+                        verbose_name="Dépôt d'actes",
+                    ),
+                ),
+                (
+                    "successfully_logged_once",
+                    models.BooleanField(default=False, verbose_name="Déjà connecté"),
+                ),
+                (
+                    "optin",
+                    models.BooleanField(
+                        default=False, verbose_name="Inscrit à l'infolettre"
+                    ),
+                ),
+                (
+                    "updated_pipedrive",
+                    models.BooleanField(
+                        default=False, verbose_name="Mis à jour Pipedrive"
+                    ),
+                ),
+                (
+                    "is_admin",
+                    models.BooleanField(
+                        db_comment="super admin bypass",
+                        default=False,
+                        verbose_name="Est admin",
+                    ),
+                ),
+                (
+                    "is_staff",
+                    models.BooleanField(default=False, verbose_name="Est membre"),
+                ),
+            ],
+            options={
+                "db_table": "profiles",
+                "managed": False,
+                "verbose_name": "profil",
+            },
+        ),
+    ]
diff --git a/django/users/migrations/__init__.py b/django/users/migrations/__init__.py
new file mode 100644
index 000000000..e69de29bb
diff --git a/django/users/models.py b/django/users/models.py
new file mode 100644
index 000000000..c11647f4e
--- /dev/null
+++ b/django/users/models.py
@@ -0,0 +1,108 @@
+# ruff: noqa: DJ001
+
+from django.contrib.postgres.fields import ArrayField
+from django.db import models
+from django.db.models.functions import Now
+
+from core.models import Collectivite
+from users import enums as users_enums
+
+
+class User(models.Model):
+    """L'authentification est gérée par la fonctionnalité SSO de Supabase.
+
+    Le schéma de cette table est géré par Supabase. Seules les colonnes intéressantes sont
+    référencées ici.
+    Un jour, nous pourrons utiliser le User model de Django. Pour l'instant, documentons l'existant.
+    """
+
+    id = models.UUIDField(primary_key=True)
+    email = models.EmailField(verbose_name="Email", blank=True)
+
+    class Meta:
+        managed = False
+        db_table = '"auth"."users"'
+        verbose_name = "utilisateur"
+
+    def __str__(self) -> str:
+        return self.email
+
+
+class Profile(models.Model):
+    """La table `users` étant gérée par Supabase, les informations supplémentaires concernant l'utilisateur sont conservées ici."""
+
+    user = models.OneToOneField(
+        User, verbose_name="Utilisateur", on_delete=models.CASCADE, primary_key=True
+    )
+    created_at = models.DateTimeField(verbose_name="Date de création", db_default=Now())
+    # La plupart des CharField peuvent avoir une valeur nulle ou "" en base car
+    # il n'y a pas de restriction. Il faudrait changer ce comportement.
+    # Pour l'instant, documentons.
+    firstname = models.CharField(verbose_name="Prénom", blank=True, null=True)
+    lastname = models.CharField(verbose_name="Nom", blank=True, null=True)
+    email = models.EmailField(verbose_name="Email", blank=True, null=True)
+    poste = models.CharField(
+        verbose_name="Poste",
+        choices=users_enums.PosteType,
+        blank=True,
+        null=True,
+    )
+    other_poste = ArrayField(
+        verbose_name="Role(s)",
+        base_field=models.CharField(choices=users_enums.RoleType, blank=True),
+        blank=True,
+        null=True,
+    )
+    # Ce devrait être une clé étrangère pointant vers la table departements
+    # mais ce n'est actuellement pas le cas en base et dans Nuxt.
+    departement = models.CharField(verbose_name="Département", blank=True)
+    collectivite = models.ForeignKey(
+        Collectivite,
+        on_delete=models.SET_NULL,
+        blank=True,
+        null=True,
+    )
+    tel = models.CharField(verbose_name="Téléphone", blank=True)
+    verified = models.BooleanField(verbose_name="Vérifié", default=False)
+    # La valeur `blank` ne devrait pas être autorisée car un utilisateur devrait toujours
+    # avoir un `side` mais c'est le cas aujourd'hui en base.
+    side = models.CharField(
+        verbose_name="Side", choices=users_enums.ProfileSideType, blank=True, null=True
+    )
+    # Ce devrait être une clé étrangère pointant vers la table regions
+    # mais ce n'est actuellement pas le cas en base et dans Nuxt.
+    region = models.CharField(
+        verbose_name="Région",
+        blank=True,
+        null=True,
+        db_comment="Si l'utilisateur est une DREAL ou une PPA : région de son périmètre. La colonne peut être remplie pour les autres types.",
+    )
+    no_signup = models.BooleanField(
+        verbose_name="Dépôt d'actes (no_signup)",
+        default=False,
+        db_comment="Si l'utilisateur passe par un depot d'acte, il est autorisé à mettre uniquement son email. Dans ce cas l'utilisateur n'a pas de compte Docurba, et no_signup sera à TRUE.",
+    )
+    successfully_logged_once = models.BooleanField(
+        verbose_name="S'est déjà connecté", default=False
+    )
+    optin = models.BooleanField(
+        verbose_name="Est inscrit à l'infolettre", default=False
+    )
+    updated_pipedrive = models.BooleanField(
+        verbose_name="Est mis à jour sur Pipedrive",
+        default=False,
+    )
+    is_admin = models.BooleanField(
+        verbose_name="Est admin (is_admin)",
+        default=False,
+        db_comment="super admin bypass",
+    )
+    is_staff = models.BooleanField(verbose_name="Est membre (is_staff)", default=False)
+
+    class Meta:
+        managed = False
+        db_table = "profiles"
+        verbose_name = "profil"
+
+    def __str__(self) -> str:
+        return f"{self.firstname} {self.lastname}"

From d7d782a7ae4c33928997e8638b0b0a65cd62d54d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Wed, 3 Dec 2025 13:04:44 +0100
Subject: [PATCH 03/17] =?UTF-8?q?Django=20:=20ajout=20du=20side=20PPA=20?=
 =?UTF-8?q?=C3=A0=20ProfileSideType?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 django/users/enums.py                   | 1 +
 django/users/migrations/0001_initial.py | 6 +++++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/django/users/enums.py b/django/users/enums.py
index 68ddba870..00d08bffa 100644
--- a/django/users/enums.py
+++ b/django/users/enums.py
@@ -4,6 +4,7 @@
 class ProfileSideType(models.TextChoices):
     ETAT = "etat", "État"
     COLLECTIVITE = "collectivite", "Collectivité"
+    PPA = "ppa", "PPA"
 
 
 class PosteType(models.TextChoices):
diff --git a/django/users/migrations/0001_initial.py b/django/users/migrations/0001_initial.py
index eead42935..e4399cbb9 100644
--- a/django/users/migrations/0001_initial.py
+++ b/django/users/migrations/0001_initial.py
@@ -107,7 +107,11 @@ class Migration(migrations.Migration):
                     "side",
                     models.CharField(
                         blank=True,
-                        choices=[("etat", "État"), ("collectivite", "Collectivité")],
+                        choices=[
+                            ("etat", "État"),
+                            ("collectivite", "Collectivité"),
+                            ("ppa", "PPA"),
+                        ],
                         verbose_name="Type",
                     ),
                 ),

From 8cf22a697618db20864031edf219d9bb8d77567d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Wed, 3 Dec 2025 15:15:25 +0100
Subject: [PATCH 04/17] Django : ajout de la colonne "users.departements"

---
 .../0002_add_column_departements.py           | 25 +++++++++++++++++++
 django/users/models.py                        | 12 ++++++++-
 2 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 django/users/migrations/0002_add_column_departements.py

diff --git a/django/users/migrations/0002_add_column_departements.py b/django/users/migrations/0002_add_column_departements.py
new file mode 100644
index 000000000..95d1f28f9
--- /dev/null
+++ b/django/users/migrations/0002_add_column_departements.py
@@ -0,0 +1,25 @@
+# ruff: noqa: RUF012
+# Generated by Django 5.1.5 on 2025-12-03 16:40
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("users", "0001_initial"),
+    ]
+
+    operations = [
+        migrations.RunSQL(
+            sql=[
+                (
+                    "ALTER TABLE IF EXISTS public.profiles ADD COLUMN IF NOT EXISTS departements text[]"
+                )
+            ],
+            reverse_sql=[
+                (
+                    "ALTER TABLE IF EXISTS public.profiles DROP COLUMN IF EXISTS departements"
+                )
+            ],
+        )
+    ]
diff --git a/django/users/models.py b/django/users/models.py
index c11647f4e..a46a49901 100644
--- a/django/users/models.py
+++ b/django/users/models.py
@@ -55,7 +55,17 @@ class Profile(models.Model):
     )
     # Ce devrait être une clé étrangère pointant vers la table departements
     # mais ce n'est actuellement pas le cas en base et dans Nuxt.
-    departement = models.CharField(verbose_name="Département", blank=True)
+    departement = models.CharField(verbose_name="Département", blank=True, null=True)
+    # Les utilisateurs side PPA peuvent voir les départements listés dans cette colonne.
+    # Il s'agit d'une rustine temportaire pour relier les utilisateurs à plusieurs départements
+    # (et non un seul comme c'est le cas actuellement avec la colonne `departement`).
+    departements = ArrayField(
+        verbose_name="Départements",
+        # Charfield pour permettre aux départements ne contenant qu'un chiffre de commencer par un zéro.
+        base_field=models.CharField(max_length=3, blank=True),
+        blank=True,
+        null=True,
+    )
     collectivite = models.ForeignKey(
         Collectivite,
         on_delete=models.SET_NULL,

From f7e2e8fbca10663fac4c1e32c673e651c16a5c4b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Tue, 18 Nov 2025 14:28:58 +0100
Subject: [PATCH 05/17] =?UTF-8?q?Nuxt=20:=20les=20side=20PPA=20peuvent=20a?=
 =?UTF-8?q?cc=C3=A9der=20au=20tableau=20de=20bord?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/components/Layouts/AppBar.vue            | 15 +++-
 nuxt/layouts/ddt.vue                          | 25 +++---
 nuxt/pages/ddt/_departement.vue               |  9 +-
 nuxt/pages/ddt/_departement/pac.vue           |  5 ++
 .../ddt/_departement/procedures/index.vue     |  4 +
 nuxt/pages/trames/_githubRef.vue              |  5 ++
 nuxt/plugins/user.js                          | 83 ++++++++++++++-----
 nuxt/plugins/utils.js                         |  2 +-
 8 files changed, 108 insertions(+), 40 deletions(-)

diff --git a/nuxt/components/Layouts/AppBar.vue b/nuxt/components/Layouts/AppBar.vue
index 66b2e87ed..3ae2a3f6d 100644
--- a/nuxt/components/Layouts/AppBar.vue
+++ b/nuxt/components/Layouts/AppBar.vue
@@ -100,7 +100,20 @@
 
         <template v-if="$user.id">
           <v-btn
-            v-if="$user.profile.side === 'etat'"
+            v-if="$user.profile.side === 'ppa'"
+            depressed
+            color="primary"
+            :to="{
+              name: 'ddt-departement-collectivites',
+              params: {
+                departement: $user.profile.departement,
+              }
+            }"
+          >
+            Tableau de bord
+          </v-btn>
+          <v-btn
+            v-else-if="$user.profile.side === 'etat'"
             depressed
             color="primary"
             :to="{
diff --git a/nuxt/layouts/ddt.vue b/nuxt/layouts/ddt.vue
index 80ce1484e..48106dfc0 100644
--- a/nuxt/layouts/ddt.vue
+++ b/nuxt/layouts/ddt.vue
@@ -18,7 +18,7 @@
     <LayoutsAppBar flat extended>
       <v-tabs v-if="$user.profile.verified" align-with-title class="header-tabs">
         <v-tab
-          v-if="$user.profile.poste === 'ddt'"
+          v-if="$user.canViewSectionCollectivites({ departement: $user.profile.departement })"
           :to="{
             name: 'ddt-departement-collectivites',
             params: {departement: $user.profile.departement}
@@ -27,12 +27,13 @@
           Mes collectivités
         </v-tab>
         <v-tab
-          v-if="$user.profile.poste === 'ddt'"
+          v-if="$user.canViewSectionProcedures({ departement: $user.profile.departement })"
           :to="`/ddt/${$user.profile.departement}/procedures`"
         >
           Mes procédures
         </v-tab>
         <v-tab
+          v-if="$user.canViewSectionTramesPAC()"
           :to="{
             name: 'trames-githubRef',
             params: {githubRef: trameRef}
@@ -41,7 +42,7 @@
           Trame de PAC {{ trameRef.includes('region') ? 'régionale' : 'départementale' }}
         </v-tab>
         <v-tab
-          v-if="$user.profile.poste === 'ddt'"
+          v-if="$user.canViewSectionPAC()"
           :to="{
             name: 'ddt-departement-pac',
             params: {departement: $user.profile.departement}
@@ -103,15 +104,17 @@ export default {
   },
   computed: {
     isAllowed () {
-      // console.log('this.$user?.profile: ', this.$user.profile)
       return (this.$user?.profile?.side === 'etat' && this.$user?.profile?.verified) || this.$user.profile.is_admin || this.$isDev
     },
     trameRef () {
-      const scopes = { ddt: 'dept', dreal: 'region' }
-      const poste = this.$user.profile.poste
-      const code = poste === 'ddt' ? this.$user.profile.departement : this.$user.profile.region
+      if (this.$user.canViewSectionTramesPAC()) {
+        const scopes = { ddt: 'dept', dreal: 'region' }
+        const poste = this.$user.profile.poste
+        const code = poste === 'ddt' ? this.$user.profile.departement : this.$user.profile.region
 
-      return `${scopes[poste]}-${this.$options.filters.deptToRef(code)}`
+        return `${scopes[poste]}-${this.$options.filters.deptToRef(code)}`
+      }
+      return ''
     },
     ddtBetaTest () {
       return validationBetaDDT.includes(this.$route.params.departement)
@@ -121,9 +124,9 @@ export default {
     await this.$user.isReady
     this.isLoading = false
 
-    if (this.$user.profile.side !== 'etat') {
-      console.warn('Page réservée au side État')
-      this.$router.push('/')
+    if (!['etat', 'ppa'].includes(this.$user.profile.side)) {
+      console.warn('Page réservée aux sides État ou PPA.')
+      this.$nuxt.context.redirect(403, '/')
     }
 
     // const displayedKey = 'tally-displayed-m6kNJP'
diff --git a/nuxt/pages/ddt/_departement.vue b/nuxt/pages/ddt/_departement.vue
index ce3fa6be8..d6cd3262f 100644
--- a/nuxt/pages/ddt/_departement.vue
+++ b/nuxt/pages/ddt/_departement.vue
@@ -7,12 +7,9 @@ export default {
   layout: 'ddt',
   async mounted () {
     await this.$user.isReady
-
-    const routerDept = this.$route.params.departement
-    const userDept = this.$user.profile.departement
-
-    if (routerDept !== userDept && !this.$user.profile?.is_admin) {
-      this.$router.push({ params: { departement: userDept } })
+    if (!this.$user.canViewSectionCollectivites({ departement: this.$route.params.departement })) {
+      console.warn('User is not allowed to view this page.')
+      this.$nuxt.context.redirect(403, '/')
     }
   }
 }
diff --git a/nuxt/pages/ddt/_departement/pac.vue b/nuxt/pages/ddt/_departement/pac.vue
index bef552af4..fe5b4a685 100644
--- a/nuxt/pages/ddt/_departement/pac.vue
+++ b/nuxt/pages/ddt/_departement/pac.vue
@@ -185,6 +185,11 @@ export default {
     }
   },
   async mounted () {
+    if (!this.$user.canViewSectionPAC()) {
+      console.warn('User is not allowed to view this page.')
+      this.$nuxt.context.redirect(403, '/')
+    }
+
     await this.fetchProjects()
     this.loading = false
   },
diff --git a/nuxt/pages/ddt/_departement/procedures/index.vue b/nuxt/pages/ddt/_departement/procedures/index.vue
index 076c45626..8b5434dec 100644
--- a/nuxt/pages/ddt/_departement/procedures/index.vue
+++ b/nuxt/pages/ddt/_departement/procedures/index.vue
@@ -189,6 +189,10 @@ export default {
   },
   async mounted () {
     try {
+      if (!this.$user.canViewSectionProcedures({ departement: this.$route.params.departement })) {
+        console.warn('User is not allowed to view this page.')
+        this.$nuxt.context.redirect(403, '/')
+      }
       const promProcedures = await this.$urbanisator.getProceduresForDept(this.$route.params.departement)
       const rawReferentiel = fetch(`/api/geo/collectivites?departements=${this.$route.params.departement}`)
 
diff --git a/nuxt/pages/trames/_githubRef.vue b/nuxt/pages/trames/_githubRef.vue
index 3c9f8181f..93fe42235 100644
--- a/nuxt/pages/trames/_githubRef.vue
+++ b/nuxt/pages/trames/_githubRef.vue
@@ -227,6 +227,11 @@ export default {
     }
   },
   async mounted () {
+    if (!this.$user.canViewSectionTramesPAC()) {
+      console.warn('User is not allowed to view this page.')
+      this.$nuxt.context.redirect(403, '/')
+    }
+
     // Role verification
     await this.$refRole(this.gitRef, ['write'], `/documents/${this.gitRef}/pac`)
 
diff --git a/nuxt/plugins/user.js b/nuxt/plugins/user.js
index c2e84c512..08af4f237 100644
--- a/nuxt/plugins/user.js
+++ b/nuxt/plugins/user.js
@@ -12,33 +12,43 @@ const defaultUser = {
 }
 
 function handleRedirect ($supabase, event, user, router) {
-  // console.log('handleRedirect: ', event, user)
   if (event === 'SIGNED_IN') {
-    if (user.profile.poste === 'dreal') {
-      function trameRef (user) {
-        const scopes = { ddt: 'dept', dreal: 'region' }
-        const poste = user.profile.poste
-        const code = poste === 'ddt' ? user.profile.departement : user.profile.region
-
-        return `${scopes[poste]}-${code}`
-      }
-      router.push({ name: 'trames-githubRef', params: { githubRef: trameRef(user) } })
-    } else if (user.profile.poste === 'ddt') {
-      router.push({ name: 'ddt-departement-collectivites', params: { departement: user.profile.departement } })
-    }
-
-    if (user.profile.side === 'collectivite') {
-      axios({
-        url: '/api/pipedrive/collectivite_inscrite',
-        method: 'post',
-        data: { userData: { email: user.email } }
-      })
+    switch (user.profile.side) {
+      case 'etat':
+        if (user.profile.poste === 'dreal') {
+          function trameRef (user) {
+            const scopes = { ddt: 'dept', dreal: 'region' }
+            const { poste } = user.profile
+            const code = poste === 'ddt' ? user.profile.departement : user.profile.region
+            return `${scopes[poste]}-${code}`
+          }
+
+          router.push({ name: 'trames-githubRef', params: { githubRef: trameRef(user) } })
+        } else if (user.profile.poste === 'ddt') {
+          router.push({ name: 'ddt-departement-collectivites', params: { departement: user.profile.departement } })
+        }
+        break
+
+      case 'ppa':
+        router.push({ name: 'ddt-departement-collectivites', params: { departement: user.profile.departement } })
+        break
+
+      case 'collectivite':
+        axios({
+          url: '/api/pipedrive/collectivite_inscrite',
+          method: 'post',
+          data: { userData: { email: user.email } }
+        })
+        break
+      default:
+        break
     }
   }
 }
 
+// eslint-disable-next-line import/no-anonymous-default-export, unicorn/no-anonymous-default-export
 export default async ({ $supabase, app }, inject) => {
-  const user = Vue.observable(Object.assign({}, defaultUser))
+  let user = Vue.observable({ ...defaultUser })
 
   async function updateUser (session, retry = true) {
     // console.log('updateUser', session)
@@ -113,5 +123,36 @@ export default async ({ $supabase, app }, inject) => {
     })
   }
 
+  // Rights management
+  const userRights = {
+    canViewSectionCollectivites ({ departement = null }) {
+      if (this.profile.is_admin) {
+        return true
+      }
+
+      if (this.profile.poste === 'ddt') {
+        return this.profile.departement === departement
+      } else if (this.profile.side === 'ppa') {
+        return this.profile.departements.includes(departement)
+      }
+    },
+    canViewSectionProcedures ({ departement = null }) {
+      if (this.profile.is_admin) {
+        return true
+      }
+
+      if (this.profile.poste === 'ddt') {
+        return this.profile.departement === departement
+      } else if (this.profile.side === 'ppa') {
+        return this.profile.departements.includes(departement)
+      }
+    },
+    canViewSectionTramesPAC () {
+      return this.profile.side === 'etat'
+    }
+  }
+
+  user = Object.assign(user, userRights)
+
   inject('user', user)
 }
diff --git a/nuxt/plugins/utils.js b/nuxt/plugins/utils.js
index 3ae981307..fda358a3f 100644
--- a/nuxt/plugins/utils.js
+++ b/nuxt/plugins/utils.js
@@ -1,4 +1,4 @@
-export default ({ app }, inject) => {
+export default ({ app }, inject) => { // eslint-disable-line unicorn/no-anonymous-default-export
   const utils = {
     formatProcedureName (procedure, collectivite) {
       if (procedure.name) {

From c5ea35db3d53980db3328ff89b1b3365db87ab2e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Fri, 5 Dec 2025 12:02:17 +0100
Subject: [PATCH 06/17] =?UTF-8?q?Nuxt=20:=20les=20PPA=20ne=20peuvent=20pas?=
 =?UTF-8?q?=20cr=C3=A9er=20de=20proc=C3=A9dure?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/components/Dashboard/DUItemsList.vue     |  4 +--
 .../_collectiviteId/procedures/add.vue        | 15 ++---------
 .../_collectiviteId/procedure/add.vue         |  5 ++++
 .../procedures/choix-collectivite.vue         |  4 +++
 .../ddt/_departement/procedures/index.vue     |  2 +-
 nuxt/plugins/user.js                          | 26 +++++++++++++++++++
 6 files changed, 40 insertions(+), 16 deletions(-)

diff --git a/nuxt/components/Dashboard/DUItemsList.vue b/nuxt/components/Dashboard/DUItemsList.vue
index 21c379e5c..3031fc02a 100644
--- a/nuxt/components/Dashboard/DUItemsList.vue
+++ b/nuxt/components/Dashboard/DUItemsList.vue
@@ -15,7 +15,7 @@
           SCoT
         </v-tab>
         <v-spacer />
-        <v-btn v-if="!isPublic" depressed color="primary" class="align-self-center" :to="`/ddt/${collectivite.departementCode}/collectivites/${collectivite.code}/procedure/add`">
+        <v-btn v-if="!isPublic && $user.canCreateProcedure({ collectivite: collectivite })" depressed color="primary" class="align-self-center" :to="`/ddt/${collectivite.departementCode}/collectivites/${collectivite.code}/procedure/add`">
           Ajouter une procédure
         </v-btn>
       </v-tabs>
@@ -78,7 +78,7 @@
           Cette collectivité n'a pas de documents d'urbanisme sous sa compétence.
         </div>
 
-        <v-btn v-if="!isPublic" color="primary" :to="`/ddt/${collectivite.departementCode}/collectivites/${collectivite.code}/procedure/add`">
+        <v-btn v-if="!isPublic && $user.canCreateProcedure({ collectivite: collectivite })" color="primary" :to="`/ddt/${collectivite.departementCode}/collectivites/${collectivite.code}/procedure/add`">
           Ajouter une procédure
         </v-btn>
       </div>
diff --git a/nuxt/pages/collectivites/_collectiviteId/procedures/add.vue b/nuxt/pages/collectivites/_collectiviteId/procedures/add.vue
index d54cfeac3..8751dec7d 100644
--- a/nuxt/pages/collectivites/_collectiviteId/procedures/add.vue
+++ b/nuxt/pages/collectivites/_collectiviteId/procedures/add.vue
@@ -34,20 +34,9 @@ export default {
     const collectivites = await this.$nuxt3api(`/api/geo/search/collectivites?code=${this.$route.params.collectiviteId}&populate=true`)
     this.collectivite = collectivites[0]
 
-    const isSideEtatWithMatchingDepartement = this.$user.profile.side === 'etat' &&
-      this.$user.profile.departement === this.collectivite.departementCode
-    const isSideCollectiviteWithMatchingCollectivite = this.$user.profile.side === 'collectivite' &&
-      (this.$user.profile.collectivite_id === this.collectivite.code ||
-      this.$user.profile.collectivite_id === this.collectivite.intercommunaliteCode)
-
-    const canCreateProcedure =
-      this.$user.profile.is_admin ||
-      isSideEtatWithMatchingDepartement ||
-      isSideCollectiviteWithMatchingCollectivite
-
-    if (!canCreateProcedure) {
+    if (!this.$user.canCreateProcedure({ collectivite: this.collectivite })) {
       console.warn('Pas assez de droits pour créer une procédure sur ce périmètre')
-      this.$router.push(`/collectivites/${this.$route.params.collectiviteId}`)
+      this.$nuxt.context.redirect(302, `/collectivites/${this.$route.params.collectiviteId}`)
     }
   }
 }
diff --git a/nuxt/pages/ddt/_departement/collectivites/_collectiviteId/procedure/add.vue b/nuxt/pages/ddt/_departement/collectivites/_collectiviteId/procedure/add.vue
index 2ceefa29f..90634b149 100644
--- a/nuxt/pages/ddt/_departement/collectivites/_collectiviteId/procedure/add.vue
+++ b/nuxt/pages/ddt/_departement/collectivites/_collectiviteId/procedure/add.vue
@@ -34,6 +34,11 @@ export default {
   async mounted () {
     const collectivites = await this.$nuxt3api(`/api/geo/search/collectivites?code=${this.$route.params.collectiviteId}&populate=true`)
     this.collectivite = collectivites[0]
+
+    if (!this.$user.canCreateProcedure({ collectivite: this.collectivite })) {
+      console.warn('Pas assez de droits pour créer une procédure sur ce périmètre')
+      this.$nuxt.context.redirect(302, `/collectivites/${this.$route.params.collectiviteId}`)
+    }
   }
 }
 </script>
diff --git a/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue b/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
index 7be9b85a8..2174210ff 100644
--- a/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
+++ b/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
@@ -96,6 +96,10 @@ export default {
   },
   async mounted () {
     this.collectivites = await this.$nuxt3api(`/api/geo/search/collectivites?departementCode=${this.$route.params.departement}`)
+    if (!this.$user.canCreateProcedure({ departement: this.$route.params.departement })) {
+      console.warn('Pas assez de droits pour créer une procédure sur ce périmètre')
+      this.$nuxt.context.redirect(403, '/')
+    }
   },
   methods: {
     customFilter (value, search, item) {
diff --git a/nuxt/pages/ddt/_departement/procedures/index.vue b/nuxt/pages/ddt/_departement/procedures/index.vue
index 8b5434dec..8f1d0fcd8 100644
--- a/nuxt/pages/ddt/_departement/procedures/index.vue
+++ b/nuxt/pages/ddt/_departement/procedures/index.vue
@@ -4,7 +4,7 @@
       <v-col cols="12" class="d-flex align-center justify-space-between pb-0 pt-4">
         <h1>Mes Procédures</h1>
         <div>
-          <v-btn depressed color="primary" :to="`/ddt/${$route.params.departement}/procedures/choix-collectivite`">
+          <v-btn v-if="$user.canCreateProcedure({ departement: $route.params.departement })" depressed color="primary" :to="`/ddt/${$route.params.departement}/procedures/choix-collectivite`">
             Nouvelle procédure
           </v-btn>
         </div>
diff --git a/nuxt/plugins/user.js b/nuxt/plugins/user.js
index 08af4f237..d7696504b 100644
--- a/nuxt/plugins/user.js
+++ b/nuxt/plugins/user.js
@@ -46,6 +46,7 @@ function handleRedirect ($supabase, event, user, router) {
   }
 }
 
+// Mandatory for SonarQube
 // eslint-disable-next-line import/no-anonymous-default-export, unicorn/no-anonymous-default-export
 export default async ({ $supabase, app }, inject) => {
   let user = Vue.observable({ ...defaultUser })
@@ -149,6 +150,31 @@ export default async ({ $supabase, app }, inject) => {
     },
     canViewSectionTramesPAC () {
       return this.profile.side === 'etat'
+    },
+    canViewSectionPAC () {
+      return this.profile.side === 'etat' && this.profile.poste === 'ddt'
+    },
+    canCreateProcedure ({ collectivite = null, departement = null }) {
+      if (this.profile.is_admin) {
+        return true
+      }
+
+      switch (this.profile.side) {
+        case 'etat': {
+          return this.profile.departement === (collectivite?.departementCode || departement)
+        }
+
+        case 'collectivite': {
+          return (
+            this.profile.collectivite_id === collectivite?.code ||
+            this.profile.collectivite_id === collectivite?.intercommunaliteCode
+          )
+        }
+
+        default: {
+          return false
+        }
+      }
     }
   }
 

From 2f4669da79dae342c043131d2ea905be40c05afd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Fri, 5 Dec 2025 14:26:06 +0100
Subject: [PATCH 07/17] =?UTF-8?q?Nuxt=20:=20les=20sides=20PPA=20ne=20peuve?=
 =?UTF-8?q?nt=20pas=20cr=C3=A9er=20de=20proc=C3=A9dure=20secondaire?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/pages/frise/_procedureId/index.vue | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nuxt/pages/frise/_procedureId/index.vue b/nuxt/pages/frise/_procedureId/index.vue
index 53de8f23d..7a8f82152 100644
--- a/nuxt/pages/frise/_procedureId/index.vue
+++ b/nuxt/pages/frise/_procedureId/index.vue
@@ -316,6 +316,9 @@ export default
       }
     },
     canCreateSecondaryProcedure () {
+      if (this.$user.profile.side === 'ppa') {
+        return false
+      }
       return this.isAdmin && !this.procedure.secondary_procedure_of
     },
     internalDocType () {

From 441ade75913e5d9c57795ab0d9bb3057e2301259 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Mon, 8 Dec 2025 16:24:26 +0100
Subject: [PATCH 08/17] =?UTF-8?q?Django=20:=20Users=20=E2=80=94=20ajout=20?=
 =?UTF-8?q?du=20poste=20R=C3=A9gion?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 django/users/enums.py                   | 3 +++
 django/users/migrations/0001_initial.py | 1 +
 2 files changed, 4 insertions(+)

diff --git a/django/users/enums.py b/django/users/enums.py
index 00d08bffa..37ad896bf 100644
--- a/django/users/enums.py
+++ b/django/users/enums.py
@@ -13,6 +13,9 @@ class PosteType(models.TextChoices):
     DDT = "ddt", "DDT(M)/DEAL"
     DREAL = "dreal", "DREAL"
 
+    # Postes PPA
+    REGION = "region", "Région"
+
     # Postes Collectivités
     BE = "be", "Bureau d'études"
     ELU = "elu", "Collectivité, Élu·e"
diff --git a/django/users/migrations/0001_initial.py b/django/users/migrations/0001_initial.py
index e4399cbb9..fac856cce 100644
--- a/django/users/migrations/0001_initial.py
+++ b/django/users/migrations/0001_initial.py
@@ -66,6 +66,7 @@ class Migration(migrations.Migration):
                                 "Collectivité, Technicien·ne ou employé·e",
                             ),
                             ("agence_urba", "Agence d'urbanisme"),
+                            ("region", "Région"),
                             ("autre", "Autre"),
                         ],
                         verbose_name="Poste",

From 3ea290cec1b02b7586617d1a795e13c56d538794 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Mon, 8 Dec 2025 17:33:41 +0100
Subject: [PATCH 09/17] =?UTF-8?q?Nuxt=20:=20affichage=20du=20poste=20R?=
 =?UTF-8?q?=C3=A9gion=20+=20nom=20de=20la=20r=C3=A9gion?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/plugins/utils.js | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/nuxt/plugins/utils.js b/nuxt/plugins/utils.js
index fda358a3f..445adce58 100644
--- a/nuxt/plugins/utils.js
+++ b/nuxt/plugins/utils.js
@@ -1,4 +1,6 @@
-export default ({ app }, inject) => { // eslint-disable-line unicorn/no-anonymous-default-export
+import regions from '@/assets/data/Regions.json'
+
+export default ({ app }, inject) => {
   const utils = {
     formatProcedureName (procedure, collectivite) {
       if (procedure.name) {
@@ -52,6 +54,7 @@ export default ({ app }, inject) => { // eslint-disable-line unicorn/no-anonymou
       creator.id = profile.user_id
       creator.initiator = !!profile.initiator
       creator.profile = profile
+      creator.region = profile.region
       return creator
     },
     // ⚠️ Les clefs sont a minima aussi utilisées pour Pipedrive et Brevo
@@ -72,11 +75,17 @@ export default ({ app }, inject) => { // eslint-disable-line unicorn/no-anonymou
       agence_urba: 'Agence d\'urbanisme',
       autre: 'Autre'
     },
+    POSTES_PPA: {
+      region: 'Région'
+    },
     formatPostes (profile) {
       const postes = []
 
-      const POSTES = { ...this.POSTES_ETAT, ...this.POSTES_COLLECTIVITE }
-      if (profile.poste !== 'autre') {
+      const POSTES = { ...this.POSTES_ETAT, ...this.POSTES_COLLECTIVITE, ...this.POSTES_PPA }
+      if (profile.poste === 'region') {
+        const region = regions.find(r => r.code === profile.region)
+        postes.push(`${POSTES[profile.poste]} ${region.name}`)
+      } else if (profile.poste !== 'autre') {
         postes.push(POSTES[profile.poste])
       }
 

From 7612ebb76e46a510df17203b0f0cd644dc2fdb27 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Tue, 9 Dec 2025 17:02:04 +0100
Subject: [PATCH 10/17] =?UTF-8?q?Nuxt=20:=20les=20PPA=20ne=20peuvent=20pas?=
 =?UTF-8?q?=20supprimer=20de=20proc=C3=A9dure?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Les règles de suppression sont actuellement éparpillées.
Le besoin actuel est de modifier le comportement à la marge pour cacher le bouton
aux sides PPA, or je pense que l'harmonisation des règles
nécessiterait une PR en soi.
Pour l'instant, faisons simple.
---
 nuxt/components/Dashboard/DUProcedureItem.vue    | 2 +-
 nuxt/components/Dashboard/DUSubProcedureItem.vue | 2 +-
 nuxt/pages/frise/_procedureId/index.vue          | 2 +-
 nuxt/plugins/user.js                             | 3 +++
 4 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/nuxt/components/Dashboard/DUProcedureItem.vue b/nuxt/components/Dashboard/DUProcedureItem.vue
index 638c483cb..a35eeaf96 100644
--- a/nuxt/components/Dashboard/DUProcedureItem.vue
+++ b/nuxt/components/Dashboard/DUProcedureItem.vue
@@ -65,7 +65,7 @@
           PAC
         </nuxt-link>
 
-        <v-dialog v-model="dialog" width="500">
+        <v-dialog v-if="$user.canDeleteProcedure()" v-model="dialog" width="500">
           <template #activator="{ on, attrs }">
             <span class="error--text text-decoration-underline ml-auto align-center" v-bind="attrs" v-on="on">
               Supprimer
diff --git a/nuxt/components/Dashboard/DUSubProcedureItem.vue b/nuxt/components/Dashboard/DUSubProcedureItem.vue
index 8bca0b559..917405073 100644
--- a/nuxt/components/Dashboard/DUSubProcedureItem.vue
+++ b/nuxt/components/Dashboard/DUSubProcedureItem.vue
@@ -59,7 +59,7 @@
         <!-- <span class="primary--text text-decoration-underline text--disabled">
           Note d'enjeux
         </span> -->
-        <v-dialog v-model="dialog" width="500">
+        <v-dialog v-if="$user.canDeleteProcedure()" v-model="dialog" width="500">
           <template #activator="{ on, attrs }">
             <span class="error--text text-decoration-underline ml-auto align-center" v-bind="attrs" v-on="on">
               Supprimer
diff --git a/nuxt/pages/frise/_procedureId/index.vue b/nuxt/pages/frise/_procedureId/index.vue
index 7a8f82152..9d5176806 100644
--- a/nuxt/pages/frise/_procedureId/index.vue
+++ b/nuxt/pages/frise/_procedureId/index.vue
@@ -95,7 +95,7 @@
               </v-list-item-title>
             </v-list-item> -->
 
-            <v-dialog v-model="dialog" width="500">
+            <v-dialog v-if="$user.canDeleteProcedure()" v-model="dialog" width="500">
               <template #activator="{ on, attrs }">
                 <v-list-item link v-bind="attrs" v-on="on">
                   <v-list-item-title class="error--text">
diff --git a/nuxt/plugins/user.js b/nuxt/plugins/user.js
index d7696504b..a9fa0553d 100644
--- a/nuxt/plugins/user.js
+++ b/nuxt/plugins/user.js
@@ -175,6 +175,9 @@ export default async ({ $supabase, app }, inject) => {
           return false
         }
       }
+    },
+    canDeleteProcedure () {
+      return this.profile.side !== 'ppa'
     }
   }
 

From 2f8bf4101f4dea383c485ed45d44b880b7379529 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Thu, 11 Dec 2025 22:42:23 +0100
Subject: [PATCH 11/17] =?UTF-8?q?Django=20:=20Users=20=E2=88=92=20ne=20pas?=
 =?UTF-8?q?=20utiliser=20une=20cl=C3=A9=20=C3=A9trang=C3=A8re=20vers=20Col?=
 =?UTF-8?q?lectivite?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

La clé primaire du modèle Collectivite est de la forme
"{code_insee}_{type}",
or le format qui est dans la colonne Profile.collectivite_id est "{code_insee}".
En attendant de corriger ce souci, affichons dans l'admin le contenu de
la colonne mais en lecture seule.
---
 django/users/admin.py  |  1 -
 django/users/models.py | 13 ++++++-------
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/django/users/admin.py b/django/users/admin.py
index 970abbd8c..b5588b492 100644
--- a/django/users/admin.py
+++ b/django/users/admin.py
@@ -10,7 +10,6 @@
 class ProfileAdmin(admin.ModelAdmin):
     readonly_fields = ("user",)
     search_fields = ("email",)
-    raw_id_fields = ("collectivite",)
     list_filter = ("poste", "side")
 
     def has_add_permission(self, request) -> Literal[False]:
diff --git a/django/users/models.py b/django/users/models.py
index a46a49901..404e360e2 100644
--- a/django/users/models.py
+++ b/django/users/models.py
@@ -4,7 +4,6 @@
 from django.db import models
 from django.db.models.functions import Now
 
-from core.models import Collectivite
 from users import enums as users_enums
 
 
@@ -66,13 +65,13 @@ class Profile(models.Model):
         blank=True,
         null=True,
     )
-    collectivite = models.ForeignKey(
-        Collectivite,
-        on_delete=models.SET_NULL,
-        blank=True,
-        null=True,
+    # Ce devrait être une clé étrangère pointant vers Collectivite mais la colonne collectivite_id
+    # ne conserve pas la clé primaire déclarée pour le modèle (i.e. au format f"{code_insee}_{type}")
+    # mais seulement le "code_insee".
+    collectivite_id = models.CharField(
+        verbose_name="Code Collectivité", blank=True, null=True
     )
-    tel = models.CharField(verbose_name="Téléphone", blank=True)
+    tel = models.CharField(verbose_name="Téléphone", blank=True, null=True)
     verified = models.BooleanField(verbose_name="Vérifié", default=False)
     # La valeur `blank` ne devrait pas être autorisée car un utilisateur devrait toujours
     # avoir un `side` mais c'est le cas aujourd'hui en base.

From 6683acce301886319d73b49a073092cce76635e4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Mon, 15 Dec 2025 14:05:42 +0100
Subject: [PATCH 12/17] =?UTF-8?q?Nuxt=20:=20s=C3=A9parer=20la=20validation?=
 =?UTF-8?q?=20du=20profil=20de=20son=20side?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/layouts/ddt.vue | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/nuxt/layouts/ddt.vue b/nuxt/layouts/ddt.vue
index 48106dfc0..7cbfb80d2 100644
--- a/nuxt/layouts/ddt.vue
+++ b/nuxt/layouts/ddt.vue
@@ -70,7 +70,7 @@
         </v-row>
       </v-container>
       <template v-else>
-        <nuxt v-if="isAllowed" />
+        <nuxt v-if="isVerified" />
         <v-container v-else class="fill-height">
           <v-row justify="center" align="center">
             <v-col cols="12" class="mb-4">
@@ -103,8 +103,8 @@ export default {
     }
   },
   computed: {
-    isAllowed () {
-      return (this.$user?.profile?.side === 'etat' && this.$user?.profile?.verified) || this.$user.profile.is_admin || this.$isDev
+    isVerified () {
+      return this.$user?.profile?.verified || this.$user.profile.is_admin
     },
     trameRef () {
       if (this.$user.canViewSectionTramesPAC()) {

From 912398eef2c9025a513f89a72b9c4e1c5c7231a2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Tue, 6 Jan 2026 15:40:11 +0100
Subject: [PATCH 13/17] Nuxt : utilisation du code 302 pour indiquer une
 redirection

---
 nuxt/layouts/ddt.vue                                          | 2 +-
 nuxt/pages/ddt/_departement.vue                               | 2 +-
 nuxt/pages/ddt/_departement/pac.vue                           | 2 +-
 nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue | 2 +-
 nuxt/pages/ddt/_departement/procedures/index.vue              | 2 +-
 nuxt/pages/trames/_githubRef.vue                              | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/nuxt/layouts/ddt.vue b/nuxt/layouts/ddt.vue
index 7cbfb80d2..1e92b650c 100644
--- a/nuxt/layouts/ddt.vue
+++ b/nuxt/layouts/ddt.vue
@@ -126,7 +126,7 @@ export default {
 
     if (!['etat', 'ppa'].includes(this.$user.profile.side)) {
       console.warn('Page réservée aux sides État ou PPA.')
-      this.$nuxt.context.redirect(403, '/')
+      this.$nuxt.context.redirect(302, '/')
     }
 
     // const displayedKey = 'tally-displayed-m6kNJP'
diff --git a/nuxt/pages/ddt/_departement.vue b/nuxt/pages/ddt/_departement.vue
index d6cd3262f..f816a10c1 100644
--- a/nuxt/pages/ddt/_departement.vue
+++ b/nuxt/pages/ddt/_departement.vue
@@ -9,7 +9,7 @@ export default {
     await this.$user.isReady
     if (!this.$user.canViewSectionCollectivites({ departement: this.$route.params.departement })) {
       console.warn('User is not allowed to view this page.')
-      this.$nuxt.context.redirect(403, '/')
+      this.$nuxt.context.redirect(302, '/')
     }
   }
 }
diff --git a/nuxt/pages/ddt/_departement/pac.vue b/nuxt/pages/ddt/_departement/pac.vue
index fe5b4a685..d8f471270 100644
--- a/nuxt/pages/ddt/_departement/pac.vue
+++ b/nuxt/pages/ddt/_departement/pac.vue
@@ -187,7 +187,7 @@ export default {
   async mounted () {
     if (!this.$user.canViewSectionPAC()) {
       console.warn('User is not allowed to view this page.')
-      this.$nuxt.context.redirect(403, '/')
+      this.$nuxt.context.redirect(302, '/')
     }
 
     await this.fetchProjects()
diff --git a/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue b/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
index 2174210ff..f580bfaba 100644
--- a/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
+++ b/nuxt/pages/ddt/_departement/procedures/choix-collectivite.vue
@@ -98,7 +98,7 @@ export default {
     this.collectivites = await this.$nuxt3api(`/api/geo/search/collectivites?departementCode=${this.$route.params.departement}`)
     if (!this.$user.canCreateProcedure({ departement: this.$route.params.departement })) {
       console.warn('Pas assez de droits pour créer une procédure sur ce périmètre')
-      this.$nuxt.context.redirect(403, '/')
+      this.$nuxt.context.redirect(302, '/')
     }
   },
   methods: {
diff --git a/nuxt/pages/ddt/_departement/procedures/index.vue b/nuxt/pages/ddt/_departement/procedures/index.vue
index 8f1d0fcd8..fadd0292f 100644
--- a/nuxt/pages/ddt/_departement/procedures/index.vue
+++ b/nuxt/pages/ddt/_departement/procedures/index.vue
@@ -191,7 +191,7 @@ export default {
     try {
       if (!this.$user.canViewSectionProcedures({ departement: this.$route.params.departement })) {
         console.warn('User is not allowed to view this page.')
-        this.$nuxt.context.redirect(403, '/')
+        this.$nuxt.context.redirect(302, '/')
       }
       const promProcedures = await this.$urbanisator.getProceduresForDept(this.$route.params.departement)
       const rawReferentiel = fetch(`/api/geo/collectivites?departements=${this.$route.params.departement}`)
diff --git a/nuxt/pages/trames/_githubRef.vue b/nuxt/pages/trames/_githubRef.vue
index 93fe42235..e9855f054 100644
--- a/nuxt/pages/trames/_githubRef.vue
+++ b/nuxt/pages/trames/_githubRef.vue
@@ -229,7 +229,7 @@ export default {
   async mounted () {
     if (!this.$user.canViewSectionTramesPAC()) {
       console.warn('User is not allowed to view this page.')
-      this.$nuxt.context.redirect(403, '/')
+      this.$nuxt.context.redirect(302, '/')
     }
 
     // Role verification

From 5bc3472e2dc1d094a5264b50933be6478a507006 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Thu, 8 Jan 2026 11:02:02 +0100
Subject: [PATCH 14/17] =?UTF-8?q?Nuxt=20:=20=C3=A9viter=20une=20erreur=20l?=
 =?UTF-8?q?ocale=20dans=20la=20console?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nuxt/plugins/user.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nuxt/plugins/user.js b/nuxt/plugins/user.js
index a9fa0553d..897508aec 100644
--- a/nuxt/plugins/user.js
+++ b/nuxt/plugins/user.js
@@ -47,7 +47,7 @@ function handleRedirect ($supabase, event, user, router) {
 }
 
 // Mandatory for SonarQube
-// eslint-disable-next-line import/no-anonymous-default-export, unicorn/no-anonymous-default-export
+// eslint-disable-next-line import/no-anonymous-default-export
 export default async ({ $supabase, app }, inject) => {
   let user = Vue.observable({ ...defaultUser })
 

From 13fdde9734d2d5d058725f1efb8ab24f952fdbbc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Thu, 8 Jan 2026 14:48:26 +0100
Subject: [PATCH 15/17] =?UTF-8?q?Django=20:=20re-g=C3=A9n=C3=A9ration=20de?=
 =?UTF-8?q?=20la=20migration=20initiale=20de=20users?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 django/users/migrations/0001_initial.py | 65 +++++++++++++++++--------
 1 file changed, 46 insertions(+), 19 deletions(-)

diff --git a/django/users/migrations/0001_initial.py b/django/users/migrations/0001_initial.py
index fac856cce..22add0abe 100644
--- a/django/users/migrations/0001_initial.py
+++ b/django/users/migrations/0001_initial.py
@@ -1,8 +1,9 @@
 # ruff: noqa: RUF012
-# Generated by Django 5.1.5 on 2025-12-12 09:41
+# Generated by Django 5.1.5 on 2026-01-08 13:44
 
 import django.contrib.postgres.fields
 import django.db.models.deletion
+import django.db.models.functions.datetime
 from django.db import migrations, models
 
 
@@ -22,9 +23,9 @@ class Migration(migrations.Migration):
                 ),
             ],
             options={
-                "db_table": '"auth"."users"',
-                "managed": False,
                 "verbose_name": "utilisateur",
+                "managed": False,
+                "db_table": '"auth"."users"',
             },
         ),
         migrations.CreateModel(
@@ -43,14 +44,23 @@ class Migration(migrations.Migration):
                 (
                     "created_at",
                     models.DateTimeField(
-                        auto_now_add=True, verbose_name="Date de création"
+                        db_default=django.db.models.functions.datetime.Now(),
+                        verbose_name="Date de création",
                     ),
                 ),
-                ("firstname", models.CharField(blank="True", verbose_name="Prénom")),
-                ("lastname", models.CharField(blank="True", verbose_name="Nom")),
+                (
+                    "firstname",
+                    models.CharField(blank=True, null=True, verbose_name="Prénom"),
+                ),
+                (
+                    "lastname",
+                    models.CharField(blank=True, null=True, verbose_name="Nom"),
+                ),
                 (
                     "email",
-                    models.EmailField(blank=True, max_length=254, verbose_name="Email"),
+                    models.EmailField(
+                        blank=True, max_length=254, null=True, verbose_name="Email"
+                    ),
                 ),
                 (
                     "poste",
@@ -59,6 +69,7 @@ class Migration(migrations.Migration):
                         choices=[
                             ("ddt", "DDT(M)/DEAL"),
                             ("dreal", "DREAL"),
+                            ("region", "Région"),
                             ("be", "Bureau d'études"),
                             ("elu", "Collectivité, Élu·e"),
                             (
@@ -66,9 +77,9 @@ class Migration(migrations.Migration):
                                 "Collectivité, Technicien·ne ou employé·e",
                             ),
                             ("agence_urba", "Agence d'urbanisme"),
-                            ("region", "Région"),
                             ("autre", "Autre"),
                         ],
+                        null=True,
                         verbose_name="Poste",
                     ),
                 ),
@@ -91,15 +102,25 @@ class Migration(migrations.Migration):
                             ],
                         ),
                         blank=True,
-                        size=10,
+                        null=True,
+                        size=None,
                         verbose_name="Role(s)",
                     ),
                 ),
                 (
                     "departement",
-                    models.CharField(blank=True, verbose_name="Département"),
+                    models.CharField(blank=True, null=True, verbose_name="Département"),
+                ),
+                (
+                    "collectivite_id",
+                    models.CharField(
+                        blank=True, null=True, verbose_name="Code Collectivité"
+                    ),
+                ),
+                (
+                    "tel",
+                    models.CharField(blank=True, null=True, verbose_name="Téléphone"),
                 ),
-                ("tel", models.CharField(blank=True, verbose_name="Téléphone")),
                 (
                     "verified",
                     models.BooleanField(default=False, verbose_name="Vérifié"),
@@ -113,7 +134,8 @@ class Migration(migrations.Migration):
                             ("collectivite", "Collectivité"),
                             ("ppa", "PPA"),
                         ],
-                        verbose_name="Type",
+                        null=True,
+                        verbose_name="Side",
                     ),
                 ),
                 (
@@ -121,6 +143,7 @@ class Migration(migrations.Migration):
                     models.CharField(
                         blank=True,
                         db_comment="Si l'utilisateur est une DREAL ou une PPA : région de son périmètre. La colonne peut être remplie pour les autres types.",
+                        null=True,
                         verbose_name="Région",
                     ),
                 ),
@@ -129,23 +152,25 @@ class Migration(migrations.Migration):
                     models.BooleanField(
                         db_comment="Si l'utilisateur passe par un depot d'acte, il est autorisé à mettre uniquement son email. Dans ce cas l'utilisateur n'a pas de compte Docurba, et no_signup sera à TRUE.",
                         default=False,
-                        verbose_name="Dépôt d'actes",
+                        verbose_name="Dépôt d'actes (no_signup)",
                     ),
                 ),
                 (
                     "successfully_logged_once",
-                    models.BooleanField(default=False, verbose_name="Déjà connecté"),
+                    models.BooleanField(
+                        default=False, verbose_name="S'est déjà connecté"
+                    ),
                 ),
                 (
                     "optin",
                     models.BooleanField(
-                        default=False, verbose_name="Inscrit à l'infolettre"
+                        default=False, verbose_name="Est inscrit à l'infolettre"
                     ),
                 ),
                 (
                     "updated_pipedrive",
                     models.BooleanField(
-                        default=False, verbose_name="Mis à jour Pipedrive"
+                        default=False, verbose_name="Est mis à jour sur Pipedrive"
                     ),
                 ),
                 (
@@ -153,18 +178,20 @@ class Migration(migrations.Migration):
                     models.BooleanField(
                         db_comment="super admin bypass",
                         default=False,
-                        verbose_name="Est admin",
+                        verbose_name="Est admin (is_admin)",
                     ),
                 ),
                 (
                     "is_staff",
-                    models.BooleanField(default=False, verbose_name="Est membre"),
+                    models.BooleanField(
+                        default=False, verbose_name="Est membre (is_staff)"
+                    ),
                 ),
             ],
             options={
+                "verbose_name": "profil",
                 "db_table": "profiles",
                 "managed": False,
-                "verbose_name": "profil",
             },
         ),
     ]

From d0f98b7feb64c0c2f6337927af5df044a6ec5cbe Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Fri, 9 Jan 2026 23:33:49 +0100
Subject: [PATCH 16/17] Nuxt : affichage du lien vers le tableau de bord des
 DDT pour les PPA

---
 nuxt/layouts/ddt.vue                    | 2 +-
 nuxt/pages/frise/_procedureId/index.vue | 2 +-
 nuxt/plugins/user.js                    | 3 +++
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/nuxt/layouts/ddt.vue b/nuxt/layouts/ddt.vue
index 1e92b650c..d4ec47f66 100644
--- a/nuxt/layouts/ddt.vue
+++ b/nuxt/layouts/ddt.vue
@@ -124,7 +124,7 @@ export default {
     await this.$user.isReady
     this.isLoading = false
 
-    if (!['etat', 'ppa'].includes(this.$user.profile.side)) {
+    if (!this.$user.canViewDDTLayout()) {
       console.warn('Page réservée aux sides État ou PPA.')
       this.$nuxt.context.redirect(302, '/')
     }
diff --git a/nuxt/pages/frise/_procedureId/index.vue b/nuxt/pages/frise/_procedureId/index.vue
index 9d5176806..25dfb689b 100644
--- a/nuxt/pages/frise/_procedureId/index.vue
+++ b/nuxt/pages/frise/_procedureId/index.vue
@@ -355,7 +355,7 @@ export default
       return this.enrichedEvents.map(e => e.attachements).flat().filter(e => e)
     },
     backToCollectivite () {
-      if (this.$user.id && this.$user.profile && this.$user.profile.side === 'etat') {
+      if (this.$user.id && this.$user.profile && this.$user.canViewDDTLayout()) {
         return `/ddt/${this.collectivite.departementCode}/collectivites/${this.collectivite.code}/${this.collectivite.code.length > 5 ? 'epci' : 'commune'}`
       } else {
         return `/collectivites/${this.collectivite.code}`
diff --git a/nuxt/plugins/user.js b/nuxt/plugins/user.js
index 897508aec..245eecd15 100644
--- a/nuxt/plugins/user.js
+++ b/nuxt/plugins/user.js
@@ -126,6 +126,9 @@ export default async ({ $supabase, app }, inject) => {
 
   // Rights management
   const userRights = {
+    canViewDDTLayout () {
+      return ['etat', 'ppa'].includes(this.profile.side)
+    },
     canViewSectionCollectivites ({ departement = null }) {
       if (this.profile.is_admin) {
         return true

From 6196a533e2822d84a35e6cd160d05fe6487352f8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9line=20Martinet=20Sanchez?=
 <celine.martinet.sanchez+github@gmail.com>
Date: Fri, 9 Jan 2026 23:39:41 +0100
Subject: [PATCH 17/17] move me

---
 nuxt/plugins/sharing.js | 48 ++++++++++++++++++++---------------------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/nuxt/plugins/sharing.js b/nuxt/plugins/sharing.js
index ac4c26c12..9e9c881a7 100644
--- a/nuxt/plugins/sharing.js
+++ b/nuxt/plugins/sharing.js
@@ -39,30 +39,30 @@ export default ({ app, $supabase, $utils, $user, $analytics }, inject) => {
       let title = 'Invitation à collaborer sur Docurba'
       if ($user.profile.departement && $user.profile.side === 'etat') { title = `La DDT (M) du ${$user.profile.departement} vous invite à collaborer sur Docurba` }
       if (collectivite?.intitule && $user.profile.side === 'collectivite') { title = `La collectivité ${collectivite?.intitule} vous invite à collaborer sur Docurba` }
-      await axios({
-        url: '/api/slack/notify/frp_shared',
-        method: 'post',
-        data: {
-          from: {
-            email: $user.email,
-            firstname: $user.profile.firstname,
-            lastname: $user.profile.lastname,
-            poste: `${$user.profile.poste ?? ''} ${$user.profile.other_poste ?? ''}`
-          },
-          to: {
-            emailsFormatted: toInsert.map(e => e.user_email).reduce((acc, curr) => acc + ', ' + curr, '').slice(2),
-            emails: toInsert.map(e => e.user_email)
-          },
-          type: 'frp',
-          procedure: {
-            id: procedure.id,
-            project_id: procedure.project_id,
-            url: `/frise/${procedure.id}`,
-            name: $utils.formatProcedureName(procedure, collectivite)
-          },
-          title
-        }
-      })
+      // await axios({
+      //   url: '/api/slack/notify/frp_shared',
+      //   method: 'post',
+      //   data: {
+      //     from: {
+      //       email: $user.email,
+      //       firstname: $user.profile.firstname,
+      //       lastname: $user.profile.lastname,
+      //       poste: `${$user.profile.poste ?? ''} ${$user.profile.other_poste ?? ''}`
+      //     },
+      //     to: {
+      //       emailsFormatted: toInsert.map(e => e.user_email).reduce((acc, curr) => acc + ', ' + curr, '').slice(2),
+      //       emails: toInsert.map(e => e.user_email)
+      //     },
+      //     type: 'frp',
+      //     procedure: {
+      //       id: procedure.id,
+      //       project_id: procedure.project_id,
+      //       url: `/frise/${procedure.id}`,
+      //       name: $utils.formatProcedureName(procedure, collectivite)
+      //     },
+      //     title
+      //   }
+      // })
     },
     async getSuggestedCollaborators (collectivite) {
       const {