fix(api): filter with areas zones (COM/DEP...)

Use ST_Intersects when the provided geom_model is different from the
actual model of the query. It enables to intersect the geometry rather
than using cor_area_synthese table that could give sensitive info to the
user

backend/geonature/core/gn_synthese/utils/query_select_sqla.py

@@ -473,13 +473,17 @@ def filter_other_filters(self, user):
         # generic filters
         for colname, value in self.filters.items():
             if colname.startswith("area"):
-                cor_area_synthese_alias = aliased(CorAreaSynthese)
-                self.add_join(
-                    cor_area_synthese_alias,
-                    cor_area_synthese_alias.id_synthese,
-                    self.model.id_synthese,
-                )
-                self.query = self.query.where(cor_area_synthese_alias.id_area.in_(value))
+                if self.geom_column.class_ != self.model:
+                    l_areas_cte = LAreas.query.filter(LAreas.id_area.in_(value)).cte("area_filter")
+                    self.query = self.query.where(func.ST_Intersects(self.geom_column, l_areas_cte.c.geom))
+                else:
+                    cor_area_synthese_alias = aliased(CorAreaSynthese)
+                    self.add_join(
+                        cor_area_synthese_alias,
+                        cor_area_synthese_alias.id_synthese,
+                        self.model.id_synthese,
+                    )
+                    self.query = self.query.where(cor_area_synthese_alias.id_area.in_(value))
             elif colname.startswith("id_"):
                 col = getattr(self.model.__table__.columns, colname)
                 if isinstance(value, list):