do not allow view students picture for unauthorized users