1.1 --- a/app/main/_filter/21_auth.lua	Mon Nov 10 18:48:58 2014 +0100
     1.2 +++ b/app/main/_filter/21_auth.lua	Mon Nov 10 18:54:34 2014 +0100
     1.3 @@ -44,9 +44,20 @@
     1.4  
     1.5  end
     1.6  
     1.7 +if app.session:has_access("authors_pseudonymous") then
     1.8 +  if module == "member_image" and view == "show" and param.get("image_type") == "avatar" then
     1.9 +    auth_needed = false
    1.10 +  end
    1.11 +end
    1.12 +
    1.13 +if app.session:has_access("everything") then
    1.14 +  if module == "member_image" and view == "show" then
    1.15 +    auth_needed = false
    1.16 +  end
    1.17 +end
    1.18 +
    1.19  if app.session:has_access("all_pseudonymous") then
    1.20 -  if module == "member_image" and view == "show"
    1.21 -   or module == "vote" and view == "show_incoming"
    1.22 +  if module == "vote" and view == "show_incoming"
    1.23     or module == "interest" and view == "show_incoming"
    1.24     or module == "supporter" and view == "show_incoming" 
    1.25     or module == "vote" and view == "list" then