Field permissions for photo and attachments