update perms for a photo; still a bunch to do