diff --git a/include/ws_functions.inc.php b/include/ws_functions.inc.php index d2b5537ed..de4acc6ea 100644 --- a/include/ws_functions.inc.php +++ b/include/ws_functions.inc.php @@ -20,7 +20,8 @@ function ws_isInvokeAllowed($res, $methodName, $params) } if ( !is_autorize_status(ACCESS_GUEST) and - strpos($methodName,'pwg.session.')!==0 ) + strpos($methodName,'pwg.session.')!==0 and + 'pwg.images.uploadAsync'!=$methodName ) { return new PwgError(401, 'Access denied'); }