odoo
/
odoo
2
0
Fork 0
Code Pull Requests Releases Activity

[FIX] auth of pagenew 

bzr revid: xmo@openerp.com-20131024111710-5ghadng4we3p2cgg
This commit is contained in:
Xavier Morel 2013-10-24 13:17:10 +02:00
parent 980ec4bc9e
commit c38f729543
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
addons/website/controllers/main.py
View File

@ -51,8 +51,7 @@ class Website(openerp.addons.web.controllers.main.Home):
def index(self, **kw):
return self.page("website.homepage")
# FIXME: auth, if /pagenew known anybody can create new empty page
@website.route('/pagenew/<path:path>', type='http', auth="admin")
@website.route('/pagenew/<path:path>', type='http', auth="user")
def pagenew(self, path, noredirect=NOPE):
module = 'website'
# completely arbitrary max_length