Should not we rename method to updateMyProfilePhoto to indicate better that user can only updated his own photo ?