adding acl checks for image requests
new acl check system