enforce share permissions for viewing schedule images