From c52a231bc08558077788601cbd8a97cd514f1a63 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Wed, 13 May 2009 18:03:50 +0000 Subject: Create a new "add" permission and require it at the controller level when adding photos/movies/albums --- core/controllers/simple_uploader.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'core/controllers/simple_uploader.php') diff --git a/core/controllers/simple_uploader.php b/core/controllers/simple_uploader.php index 479082d5..8d8bbbc0 100644 --- a/core/controllers/simple_uploader.php +++ b/core/controllers/simple_uploader.php @@ -33,7 +33,7 @@ class Simple_Uploader_Controller extends Controller { public function add_photo($id) { $album = ORM::factory("item", $id); - access::required("edit", $album); + access::required("add", $album); access::verify_csrf(); $file_validation = new Validation($_FILES); -- cgit v1.2.3