From 2b3ad30f8a18b58abb5342bb4c63757f10ab11a6 Mon Sep 17 00:00:00 2001
From: Christophe Matthieu <chm@openerp.com>
Date: Wed, 29 Jan 2014 10:10:50 +0100
Subject: [PATCH] [FIX] website: change auth=admin into auth=public. Fix
 website_project link

bzr revid: chm@openerp.com-20140129091050-w2d7dbigflwod1uj
---
 addons/website/controllers/main.py            |  6 ++--
 addons/website/views/snippets.xml             | 32 +++++++++----------
 addons/website_google_map/controllers/main.py |  8 ++---
 .../controllers/main.py                       |  9 +++---
 .../website_project/views/website_project.xml |  2 +-
 5 files changed, 29 insertions(+), 28 deletions(-)

diff --git a/addons/website/controllers/main.py b/addons/website/controllers/main.py
index dcdfdb5114e..9befae01931 100644
--- a/addons/website/controllers/main.py
+++ b/addons/website/controllers/main.py
@@ -55,7 +55,7 @@ class Website(openerp.addons.web.controllers.main.Home):
             return werkzeug.wrappers.Response(url, mimetype='text/plain')
         return werkzeug.utils.redirect(url)
 
-    @http.route('/website/theme_change', type='http', auth="admin", website=True)
+    @http.route('/website/theme_change', type='http', auth="public", website=True)
     def theme_change(self, theme_id=False, **kwargs):
         imd = request.registry['ir.model.data']
         view = request.registry['ir.ui.view']
@@ -166,7 +166,7 @@ class Website(openerp.addons.web.controllers.main.Home):
                 })
         return result
 
-    @http.route('/website/get_view_translations', type='json', auth='admin', website=True)
+    @http.route('/website/get_view_translations', type='json', auth='public', website=True)
     def get_view_translations(self, xml_id, lang=None):
         lang = lang or request.context.get('lang')
         views = self.customize_template_get(xml_id, optional=False)
@@ -175,7 +175,7 @@ class Website(openerp.addons.web.controllers.main.Home):
         irt = request.registry.get('ir.translation')
         return irt.search_read(request.cr, request.uid, domain, ['id', 'res_id', 'value'], context=request.context)
 
-    @http.route('/website/set_translations', type='json', auth='admin', website=True)
+    @http.route('/website/set_translations', type='json', auth='public', website=True)
     def set_translations(self, data, lang):
         irt = request.registry.get('ir.translation')
         for view_id, trans in data.items():
diff --git a/addons/website/views/snippets.xml b/addons/website/views/snippets.xml
index 75c19d0d824..2012340dea1 100644
--- a/addons/website/views/snippets.xml
+++ b/addons/website/views/snippets.xml
@@ -372,22 +372,6 @@
         </div>
     </div>
 
-    <div data-snippet-id='colmd' data-selector-vertical-children='.row'>
-        <div class="oe_snippet_thumbnail">
-            <img class="oe_snippet_thumbnail_img" src="/website/static/src/img/blocks/block_column.png"/>
-            <span class="oe_snippet_thumbnail_title">Add Column</span>            
-        </div>
-        <div class="oe_snippet_body col-md-4">
-            <img class="img img-rounded img-responsive" src="/website/static/src/img/china_thumb.jpg"/>
-            <h4 class="mt16">Feature</h4>
-            <p>
-                Delete the above image or replace it with a picture
-                that illustrates your message. Click on the picture to
-                change it's <em>rounded corner</em> style.
-            </p>
-        </div>
-    </div>
-
 </div>
 
 <div id="snippet_feature" class="tab-pane fade">
@@ -878,6 +862,22 @@
 <!-- use to declare snippet for snippet editor -->
 <div id="snippet_hidden" class="hidden">
 
+    <div data-snippet-id='colmd' data-selector-vertical-children='.row'>
+        <div class="oe_snippet_thumbnail">
+            <img class="oe_snippet_thumbnail_img" src="/website/static/src/img/blocks/block_column.png"/>
+            <span class="oe_snippet_thumbnail_title">Add Column</span>            
+        </div>
+        <div class="oe_snippet_body col-md-4">
+            <img class="img img-rounded img-responsive" src="/website/static/src/img/china_thumb.jpg"/>
+            <h4 class="mt16">Feature</h4>
+            <p>
+                Delete the above image or replace it with a picture
+                that illustrates your message. Click on the picture to
+                change it's <em>rounded corner</em> style.
+            </p>
+        </div>
+    </div>
+
 </div>
 
 <div id="snippet_styles" class="hidden">
diff --git a/addons/website_google_map/controllers/main.py b/addons/website_google_map/controllers/main.py
index 04cea6901fc..98a86230d7e 100644
--- a/addons/website_google_map/controllers/main.py
+++ b/addons/website_google_map/controllers/main.py
@@ -7,7 +7,7 @@ from datetime import datetime
 
 class google_map(http.Controller):
 
-    @http.route(['/google_map/'], type='http', auth="admin", website=True)
+    @http.route(['/google_map/'], type='http', auth="public", website=True)
     def google_map(self, *arg, **post):
         values = {
             'partner_ids': post.get('partner_ids', ""),
@@ -17,7 +17,7 @@ class google_map(http.Controller):
         }
         return request.website.render("website_google_map.google_map", values)
 
-    @http.route(['/google_map/partners.json'], type='http', auth="admin", website=True)
+    @http.route(['/google_map/partners.json'], type='http', auth="public", website=True)
     def google_map_data(self, *arg, **post):
         partner_obj = request.registry['res.partner']
 
@@ -28,7 +28,7 @@ class google_map(http.Controller):
         return partner_obj.google_map_json(request.cr, openerp.SUPERUSER_ID,
                                            partner_ids, request.context)
 
-    @http.route(['/google_map/set_partner_position/'], type='http', auth="admin", website=True)
+    @http.route(['/google_map/set_partner_position/'], type='http', auth="public", website=True)
     def google_map_set_partner_position(self, *arg, **post):
         partner_obj = request.registry['res.partner']
 
@@ -41,7 +41,7 @@ class google_map(http.Controller):
             'partner_longitude': longitude,
             'date_localization': datetime.now().strftime('%Y-%m-%d'),
         }
-        partner_obj.write(request.cr, request.uid, [partner_id], values,
+        partner_obj.write(request.cr, openerp.SUPERUSER_ID, [partner_id], values,
                           request.context)
 
 
diff --git a/addons/website_hr_recruitment/controllers/main.py b/addons/website_hr_recruitment/controllers/main.py
index 927c843e58d..c50bc6a0428 100644
--- a/addons/website_hr_recruitment/controllers/main.py
+++ b/addons/website_hr_recruitment/controllers/main.py
@@ -1,6 +1,7 @@
 # -*- coding: utf-8 -*-
 import base64
 
+from openerp import SUPERUSER_ID
 from openerp.addons.web import http
 from openerp.tools.translate import _
 from openerp.addons.web.http import request
@@ -62,19 +63,19 @@ class website_hr_recruitment(http.Controller):
     def jobs_apply(self, job):
         return request.website.render("website_hr_recruitment.apply", { 'job': job })
 
-    @http.route(['/jobs/thankyou'], methods=['POST'], type='http', auth="admin", website=True, multilang=True)
+    @http.route(['/jobs/thankyou'], methods=['POST'], type='http', auth="public", website=True, multilang=True)
     def jobs_thankyou(self, **post):
         cr, uid, context = request.cr, request.uid, request.context
         imd = request.registry['ir.model.data']
         value = {
             'name': _('Online Form'),
             'user_id': False,
-            'source_id' : imd.xmlid_to_res_id(cr, uid, 'hr_recruitment.source_website_company'),
+            'source_id' : imd.xmlid_to_res_id(cr, SUPERUSER_ID, 'hr_recruitment.source_website_company'),
         }
         for f in ['phone', 'email_from', 'partner_name', 'description', 'department_id', 'job_id']:
             value[f] = post.get(f)
 
-        job_id = request.registry['hr.applicant'].create(cr, uid, value, context=context)
+        job_id = request.registry['hr.applicant'].create(cr, SUPERUSER_ID, value, context=context)
         if post['ufile']:
             attachment_value = {
                 'name': post['ufile'].filename,
@@ -84,7 +85,7 @@ class website_hr_recruitment(http.Controller):
                 'datas': base64.encodestring(post['ufile'].read()),
                 'datas_fname': post['ufile'].filename,
             }
-            request.registry['ir.attachment'].create(cr, uid, attachment_value, context=context)
+            request.registry['ir.attachment'].create(cr, SUPERUSER_ID, attachment_value, context=context)
         return request.website.render("website_hr_recruitment.thankyou", {})
 
 # vim :et:
diff --git a/addons/website_project/views/website_project.xml b/addons/website_project/views/website_project.xml
index 28adb31e3cf..bd3ee9375c6 100644
--- a/addons/website_project/views/website_project.xml
+++ b/addons/website_project/views/website_project.xml
@@ -5,7 +5,7 @@
 <!-- Layout add nav and footer -->
 <template id="footer_custom" inherit_id="website.layout" name="Footer Project's Links">
     <xpath expr="//footer//ul[@name='products']" position="inside">
-        <li t-foreach="website_project_ids" t-as="project"><a t-attf-href="/project/#{ project.id }/" t-field="project.name"/></li>
+        <li t-foreach="website_project_ids" t-as="project"><a t-attf-href="/project/#{ project.id }/"><span t-field="project.name"/></a></li>
     </xpath>
 </template>