Restricting access to images

image PageController could be your ImageAccessController. RBAC-User tables could store name of group of images related to the user or file name, that could be visible for user.