added permissions/role for administering lcd photos only