DB access info & profile pics : Deny from all