Create a new "add" permission and require it at the controller level

when adding photos/movies/albums

1 files changed, 1 insertions, 1 deletions

diff --git a/core/controllers/simple_uploader.php b/core/controllers/simple_uploader.php
index 479082d5..8d8bbbc0 100644
--- a/core/controllers/simple_uploader.php
+++ b/core/controllers/simple_uploader.php
@@ -33,7 +33,7 @@ class Simple_Uploader_Controller extends Controller {
 
   public function add_photo($id) {
     $album = ORM::factory("item", $id);
-    access::required("edit", $album);
+    access::required("add", $album);
     access::verify_csrf();
 
     $file_validation = new Validation($_FILES);