From 2362ea09f8516a1ed8b9b187be8bbc4d83195dc5 Mon Sep 17 00:00:00 2001 From: Joren Van Onder Date: Fri, 13 Apr 2018 18:34:09 -0700 Subject: [PATCH] [FIX] website_sale_digital: make /my/orders accessible with just token This route should be public because the public user should have access if the correct access token is passed. super() will ensure that. --- addons/website_sale_digital/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/website_sale_digital/controllers/main.py b/addons/website_sale_digital/controllers/main.py index c53f27d7336..302a08fad97 100644 --- a/addons/website_sale_digital/controllers/main.py +++ b/addons/website_sale_digital/controllers/main.py @@ -28,7 +28,7 @@ class WebsiteSaleDigital(CustomerPortal): @http.route([ '/my/orders/', - ], type='http', auth='user', website=True) + ], type='http', auth='public', website=True) def portal_order_page(self, order=None, **post): response = super(WebsiteSaleDigital, self).portal_order_page(order=order, **post) if not 'order' in response.qcontext: