<access>
Access controls
Every album has three separate permissions instead of one: view, add, and download. An album owner can share something viewable without automatically making the originals downloadable, which matters most for events with a wide guest list or kids' photos.
Permissions are set per album, not per group, so the same group of people can have different access to different albums — a wedding album might be view-only for guests but fully downloadable for the couple and immediate family.
Changing a permission takes effect immediately for everyone in the group, with no need to re-share or re-invite. Tightening an album from downloadable to view-only doesn't revoke copies already saved, but no further downloads are possible from that point on.