ADD: integration between user_list and photo (auto allow/deny)