foto: list: check access

Thanks-to: Ayke