diff --git a/core/model/Image.php b/core/model/Image.php
index 66d677ad4..8c84090b1 100755
--- a/core/model/Image.php
+++ b/core/model/Image.php
@@ -436,7 +436,10 @@ class Image_Saver extends DBField {
 class Image_Uploader extends Controller {
 	
 	static $allowed_actions = array(
-		'*' => 'CMS_ACCESS_CMSMain'
+		'iframe' => 'CMS_ACCESS_CMSMain',
+		'flush' => 'CMS_ACCESS_CMSMain',
+		'save' => 'CMS_ACCESS_CMSMain',
+		'delete' => 'CMS_ACCESS_CMSMain'
 	);
 	
 	/**