Is there a way to allow only admin to set user profile picture, and the user not be allowed to change it?