showing the thumbnail, lock sign if it's a request