added view authorisations for image uploading