uploadimage allows for group security