photosController members rights