user avtorized and photo