Fix admin view of private images & set "view own private files" permission

#4084