From b4ec14747bfd8e40dfb196f0ce7d595ec071bfa6 Mon Sep 17 00:00:00 2001
From: Suha Can <suhacan@microsoft.com>
Date: Mon, 11 Apr 2011 11:47:17 -0700
Subject: [PATCH] Contribution by wmild to fix bug #17119.

--HG--
branch : contributions
---
 .../Modules/Orchard.Media/Controllers/AdminController.cs        | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/Orchard.Web/Modules/Orchard.Media/Controllers/AdminController.cs b/src/Orchard.Web/Modules/Orchard.Media/Controllers/AdminController.cs
index e3d7ad359..ef4087ea5 100644
--- a/src/Orchard.Web/Modules/Orchard.Media/Controllers/AdminController.cs
+++ b/src/Orchard.Web/Modules/Orchard.Media/Controllers/AdminController.cs
@@ -41,6 +41,8 @@ namespace Orchard.Media.Controllers {
                 foreach (string key in input.Keys) {
                     if (key.StartsWith("Checkbox.") && input[key] == "true") {
                         string folderName = key.Substring("Checkbox.".Length);
+                        if (!Services.Authorizer.Authorize(Permissions.ManageMedia, T("Couldn't delete media folder")))
+                            return new HttpUnauthorizedResult();
                         _mediaService.DeleteFolder(folderName);
                     }
                 }