users with view-only privilege are not allowd to delete photo