[FIX] security: patch for 2010-01-auth - proper authentication exception
authorstw@openerp.com <>
Wed, 2 Jun 2010 16:46:58 +0000 (18:46 +0200)
committerOlivier Dony <odo@openerp.com>
Wed, 2 Jun 2010 16:46:58 +0000 (18:46 +0200)
bzr revid: odo@openerp.com-20100602164658-9ekrsnxjo39y0oau

bin/service/security.py

index e05c9ca..4e87980 100644 (file)
@@ -45,7 +45,7 @@ def check_super(passwd):
 
 def check(db, uid, passwd):
     if not passwd:
-        return False
+        raise Exception('AccessDenied')
     cached_pass = _uid_cache.get(db, {}).get(uid)
     if (cached_pass is not None) and cached_pass == passwd:
         return True