diff options
| author | niv-openerp <nicolas.vanhoren@openerp.com> | 2013-10-18 14:57:27 +0200 |
|---|---|---|
| committer | niv-openerp <nicolas.vanhoren@openerp.com> | 2013-10-18 14:57:27 +0200 |
| commit | 7636d71dfcff09648d080ea4513871a0e27b08ad (patch) | |
| tree | a435fc9f620dbf2c64716cb473499078a48ac48a /addons/web/http.py | |
| parent | c348a2f4cdf92aa8e2fdc8e86353f942478ac2ac (diff) | |
[FIX] potential bug in server-side web framework, now forbids users to call method when not authentified
bzr revid: nicolas.vanhoren@openerp.com-20131018125727-qtkzkiwkhw4z78kr
Diffstat (limited to 'addons/web/http.py')
| -rw-r--r-- | addons/web/http.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/addons/web/http.py b/addons/web/http.py index 7e12a71e44a..4bda58117d4 100644 --- a/addons/web/http.py +++ b/addons/web/http.py @@ -189,6 +189,8 @@ class WebRequest(object): def auth_method_user(): request.uid = request.session.uid + if not request.uid: + raise SessionExpiredException("Session expired") def auth_method_admin(): if not request.db: |