diff --git a/javascript/ThumbnailStripField.js b/javascript/ThumbnailStripField.js
index 304009b2..41b46a27 100755
--- a/javascript/ThumbnailStripField.js
+++ b/javascript/ThumbnailStripField.js
@@ -30,7 +30,7 @@ ThumbnailStripField.prototype = {
 	ajaxGetFiles: function(folderID,callback) {
 		if(!callback) callback = this.reapplyBehaviour.bind(this);
 		this.innerHTML = '<span style="float: left">Loading...</span>'
-		var ajaxURL = this.helperURLBase() + '&methodName='+this.updateMethod+'&folderID=' + folderID;
+		var ajaxURL = this.helperURLBase() + '&methodName='+this.updateMethod+'&folderID=' + folderID + ($('SecurityID') ? '&SecurityID=' + $('SecurityID').value : '');
 		new Ajax.Updater(this, ajaxURL, {
 			method : 'get', 
 			onComplete : callback,
@@ -45,7 +45,7 @@ ThumbnailStripField.prototype = {
 	helperURLBase: function() {
 		var fieldName = this.id; //this.id.replace(this.ownerForm().name + '_','');
 		
-		return this.ownerForm().action + '&action_callfieldmethod=1&fieldName=' + fieldName + '&ajax=1'
+		return this.ownerForm().action + '&action_callfieldmethod=1&fieldName=' + fieldName + '&ajax=1' + ($('SecurityID') ? '&SecurityID=' + $('SecurityID').value : '');
 	},
 	
 	ownerForm: function() {
diff --git a/javascript/TinyMCEImageEnhancement.js b/javascript/TinyMCEImageEnhancement.js
index 12d4df1c..bc7dd7f9 100644
--- a/javascript/TinyMCEImageEnhancement.js
+++ b/javascript/TinyMCEImageEnhancement.js
@@ -78,7 +78,7 @@ TinyMCEImageEnhancement.prototype = {
         var folderName = $('NewFolderName').value;
         var options = {
             method: 'post',
-            postBody: 'ParentID=' + this.getParentID() + '&ajax=1' ,
+            postBody: 'ParentID=' + this.getParentID() + '&ajax=1' + ($('SecurityID') ? '&SecurityID=' + $('SecurityID').value : ''),
             onSuccess: this.onFolderGetSuccess.bind(this),
             onFailure: function(transport) {
                            errorMessage('Error: Folder not added', transport); 
@@ -108,7 +108,7 @@ TinyMCEImageEnhancement.prototype = {
         var folderName = $('NewFolderName').value;
         var options = {
             method: 'post',
-            postBody: 'Created=' + currentDate + '&Name=' + folderName + '&ClassName=Folder&ID=' + folderID + '&ajax=1&action_save=1',
+            postBody: 'Created=' + currentDate + '&Name=' + folderName + '&ClassName=Folder&ID=' + folderID + '&ajax=1&action_save=1' + ($('SecurityID') ? '&SecurityID=' + $('SecurityID').value : ''),
             onSuccess: this.onFolderAddSuccess.bind(this),
             onFailure: function(transport) {
                            errorMessage('Error: Folder not added', transport);