fixing acl for photo upload