diff --git a/addons/website/controllers/main.py b/addons/website/controllers/main.py
index 9ef28bcba77..0443ac03e68 100644
--- a/addons/website/controllers/main.py
+++ b/addons/website/controllers/main.py
@@ -433,7 +433,6 @@ class Website(openerp.addons.web.controllers.main.Home):
         return request.registry['website']._image_placeholder(response)
 
     @http.route([
-        '/website/image',
         '/website/image/<xmlid>',
         '/website/image/<xmlid>/<int:max_width>x<int:max_height>',
         '/website/image/<xmlid>/<field>',
@@ -528,7 +527,7 @@ class Website(openerp.addons.web.controllers.main.Home):
     #------------------------------------------------------
     # Backend html field
     #------------------------------------------------------
-    @http.route('/website/field/html', type='http', auth="public", website=True)
+    @http.route('/website/field/html', type='http', auth="user", website=True)
     def FieldTextHtml(self, model=None, res_id=None, field=None, callback=None, **kwargs):
         record = None
         if model and res_id:
diff --git a/addons/website_mail/controllers/email_designer.py b/addons/website_mail/controllers/email_designer.py
index 16ef40095a5..f7ac12ade0c 100644
--- a/addons/website_mail/controllers/email_designer.py
+++ b/addons/website_mail/controllers/email_designer.py
@@ -82,12 +82,12 @@ class Website(addons.website.controllers.main.Website):
     #------------------------------------------------------
     # Backend email template field
     #------------------------------------------------------
-    @http.route('/website_mail/field/email', type='http', auth="public", website=True)
+    @http.route('/website_mail/field/email', type='http', auth="user", website=True)
     def FieldTextHtmlEmail(self, model=None, res_id=None, field=None, callback=None, **kwargs):
         kwargs['template'] = "website_mail.FieldTextHtmlEmail"
         return self.FieldTextHtml(model, res_id, field, callback, **kwargs)
 
-    @http.route('/website_mail/field/email_template', type='http', auth="public", website=True)
+    @http.route('/website_mail/field/email_template', type='http', auth="user", website=True)
     def FieldTextHtmlEmailTemplate(self, model=None, res_id=None, field=None, callback=None, **kwargs):
         cr, uid, context = request.cr, request.uid, request.context
         kwargs['theme'] = True