user restrictions on images