From 679d278d253e314e94da6e33c96a4f149f12fb6b Mon Sep 17 00:00:00 2001 From: Fabien Meghazi Date: Wed, 23 Apr 2014 12:07:49 +0200 Subject: [PATCH] [FIX] /web/login restore request.uid in case of authentication failure bzr revid: fme@openerp.com-20140423100749-t4y4oi01tszn3z5a --- addons/web/controllers/main.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/addons/web/controllers/main.py b/addons/web/controllers/main.py index f2101b2..c98bce8 100644 --- a/addons/web/controllers/main.py +++ b/addons/web/controllers/main.py @@ -682,9 +682,11 @@ class Home(http.Controller): redirect = '/web?' + request.httprequest.query_string values['redirect'] = redirect if request.httprequest.method == 'POST': + old_uid = request.uid uid = request.session.authenticate(request.session.db, request.params['login'], request.params['password']) if uid is not False: return http.redirect_with_hash(redirect) + request.uid = old_uid values['error'] = "Wrong login/password" return render_bootstrap_template('web.login', values) -- 1.7.10.4