Index: contrib/image_attach/image_attach.install
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/image/contrib/image_attach/image_attach.install,v
retrieving revision 1.22
diff -u -p -r1.22 image_attach.install
--- contrib/image_attach/image_attach.install	7 Sep 2009 13:09:33 -0000	1.22
+++ contrib/image_attach/image_attach.install	7 Jun 2010 15:19:55 -0000
@@ -160,3 +160,27 @@ function image_attach_update_6103() {
   return $ret;
 }
 
+/**
+ * Backport existing image attach site's permissions so existing users don't 
+ * lose permission to attach existing images.
+ */
+function image_attach_update_6104() {
+  $ret = array();
+  $subject = ', attach images,';
+  $perms = db_query('SELECT * FROM {permission} WHERE perm LIKE "%%%s%%"', $subject);
+  $replacement = ', attach images, attach existing images,';
+  while ($row = db_fetch_array($perms)) {
+    $count = 0;
+    $new_perm = str_replace($subj, $replacement, $row['perm'], $count);
+    if (!$count) {
+      continue;
+    }
+    $query = sprintf('UPDATE {permission} SET perm = "%s" WHERE pid = %d',
+                    db_escape_string($new_perm), $row['pid']);
+    $ret[] = update_sql($query);
+  }
+  return $ret;
+}
+
+
+
Index: contrib/image_attach/image_attach.module
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/image/contrib/image_attach/image_attach.module,v
retrieving revision 1.76.2.3
diff -u -p -r1.76.2.3 image_attach.module
--- contrib/image_attach/image_attach.module	21 Apr 2010 21:10:40 -0000	1.76.2.3
+++ contrib/image_attach/image_attach.module	7 Jun 2010 15:19:55 -0000
@@ -42,7 +42,7 @@ function image_attach_menu() {
  * Implementation of hook_perm()
  */
 function image_attach_perm() {
-  return array('attach images');
+  return array('attach images', 'attach existing images');
 }
 
 
@@ -213,7 +213,7 @@ function image_attach_form_alter(&$form,
 
       // Check permissions and settings
       $may_attach           = user_access('attach images');
-      $may_attach_existing  = variable_get('image_attach_existing', 1);
+      $may_attach_existing  = variable_get('image_attach_existing', 1) && user_access('attach existing images');
       $may_upload           = user_access('create images');
       $has_existing_images  = !empty($node->iids);
       $maximum_images       = variable_get('image_attach_maximum_' . $type, 0);
