Index: wp-admin/media.php
===================================================================
--- wp-admin/media.php	(revision 7816)
+++ wp-admin/media.php	(working copy)
@@ -2,6 +2,9 @@
 
 require_once('admin.php');
 
+if ( !current_user_can('upload_files') )
+	wp_die( __('You do not have sufficient permissions to access this page.') );
+
 $parent_file = 'edit.php';
 $submenu_file = 'upload.php';