[FIX] google maps controller should be for POST only

2014-05-14 13:44:14 +02:00
parent 240e91184b
commit 8e3a8bb0fe
1 changed files with 1 additions and 1 deletions
@@ -28,7 +28,7 @@ class google_map(http.Controller):
        return partner_obj.google_map_json(request.cr, openerp.SUPERUSER_ID,
                                           partner_ids, request.context)

-    @http.route(['/google_map/set_partner_position'], type='http', auth="public", website=True)
+    @http.route(['/google_map/set_partner_position'], type='http', methods=['POST'], auth="public", website=True)
    def google_map_set_partner_position(self, *arg, **post):
        partner_obj = request.registry['res.partner']