protection on var/albums and var/resizes and only displays files to the user if they have "view" permission on the base ite.