Only allow viewing/manipulating of sessions own photos

This means that users cannot display or manipulate other's photos.