Fixing the permission problem

Currently everyone can see everyone else's picture