From 8e3a8bb0feaec9e48bb597caaeda1120d346ce94 Mon Sep 17 00:00:00 2001 From: Fabien Meghazi Date: Wed, 14 May 2014 13:44:14 +0200 Subject: [PATCH] [FIX] google maps controller should be for POST only --- addons/website_google_map/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website_google_map/controllers/main.py b/addons/website_google_map/controllers/main.py index 01a0cc3b85e..9de241a00fd 100644 --- a/addons/website_google_map/controllers/main.py +++ b/addons/website_google_map/controllers/main.py @@ -28,7 +28,7 @@ class google_map(http.Controller): return partner_obj.google_map_json(request.cr, openerp.SUPERUSER_ID, partner_ids, request.context) - @http.route(['/google_map/set_partner_position'], type='http', auth="public", website=True) + @http.route(['/google_map/set_partner_position'], type='http', methods=['POST'], auth="public", website=True) def google_map_set_partner_position(self, *arg, **post): partner_obj = request.registry['res.partner']