Issue #2062015 by InternetDevels, phiit: Replace user_access() calls with ->hasPermission() in picture module.