Index: openacs-4/packages/acs-subsite/tcl/subsite-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-subsite/tcl/subsite-procs.tcl,v
diff -u -r1.22.2.2 -r1.22.2.3
--- openacs-4/packages/acs-subsite/tcl/subsite-procs.tcl	21 May 2004 23:15:14 -0000	1.22.2.2
+++ openacs-4/packages/acs-subsite/tcl/subsite-procs.tcl	19 Jul 2004 18:39:41 -0000	1.22.2.3
@@ -289,7 +289,26 @@
     return $result
 }
 
+ad_proc -public subsite::upload_allowed {} {
+    Verifies SolicitPortraitP parameter to ensure upload portrait
+    security.
 
+    @author Hector Amado (hr_amado@galileo.edu)
+    @creation-date 2004-06-16
+} {
+
+    if { ![parameter::get_from_package_key -package_key acs-subsite -parameter SolicitPortraitP]  } {
+        if { ![acs_user::site_wide_admin_p] } {
+             ns_log notice "user is tried to see user/portrait/upload  without permission"
+        ad_return_forbidden \
+               "Permission Denied" \
+               "<blockquote>
+                You don't have permission to see this page.
+               </blockquote>"
+	}
+    }
+}
+
 ad_proc subsite::util::sub_type_exists_p {
     object_type
 } {