From 6107f9c3f2990badad9ac9ec0c78be4fa6f857f5 Mon Sep 17 00:00:00 2001
From: Marcel Werk <burntime@woltlab.com>
Date: Fri, 27 Sep 2013 19:32:07 +0200
Subject: [PATCH] Added missing permission check

---
 .../install/files/lib/acp/page/AttachmentPage.class.php   | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php b/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
index 2196aa2fa1..21ff9309e1 100644
--- a/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
+++ b/wcfsetup/install/files/lib/acp/page/AttachmentPage.class.php
@@ -1,6 +1,7 @@
 <?php
 namespace wcf\acp\page;
 use wcf\data\object\type\ObjectTypeCache;
+use wcf\page\AbstractPage;
 use wcf\system\exception\PermissionDeniedException;
 
 /**
@@ -14,10 +15,17 @@ use wcf\system\exception\PermissionDeniedException;
  * @category	Community Framework
  */
 class AttachmentPage extends \wcf\page\AttachmentPage {
+	/**
+	 * @see	wcf\page\AbstractPage::$neededPermissions
+	 */
+	public $neededPermissions = array('admin.attachment.canManageAttachment');
+	
 	/**
 	 * @see	wcf\page\IPage::checkPermissions()
 	 */
 	public function checkPermissions() {
+		AbstractPage::checkPermissions();
+		
 		if ($this->attachment->tmpHash) {
 			throw new PermissionDeniedException();
 		}
-- 
2.20.1