download image limited to owner