diff --git a/apps/gallery/serializers.py b/apps/gallery/serializers.py
index 112ca432..9efe2911 100644
--- a/apps/gallery/serializers.py
+++ b/apps/gallery/serializers.py
@@ -6,19 +6,22 @@ from . import models
 class ImageSerializer(serializers.ModelSerializer):
     """Serializer for model Image."""
     # REQUEST
-    image = serializers.ImageField(write_only=True)
+    file = serializers.ImageField(source='image',
+                                  write_only=True)
+
     # RESPONSE
-    file = serializers.SerializerMethodField()
+    url = serializers.SerializerMethodField()
+
 
     class Meta:
         """Meta class"""
         model = models.Image
         fields = (
             'id',
-            'image',
-            'file'
+            'file',
+            'url'
         )
 
-    def get_file(self, obj):
+    def get_url(self, obj):
         """Get absolute URL path"""
         return obj.get_full_image_url(request=self.context.get('request'))
diff --git a/apps/gallery/views.py b/apps/gallery/views.py
index 31c08084..a3b61727 100644
--- a/apps/gallery/views.py
+++ b/apps/gallery/views.py
@@ -1,12 +1,12 @@
 from rest_framework import generics
-from rest_framework.permissions import AllowAny
 
+from utils.permissions import IsAuthenticatedAndTokenIsValid
 from . import models, serializers
 
 
 class ImageUploadView(generics.CreateAPIView):
     """Upload image to gallery"""
-    permission_classes = (AllowAny, )
+    permission_classes = (IsAuthenticatedAndTokenIsValid, )
     model = models.Image
     queryset = models.Image.objects.all()
     serializer_class = serializers.ImageSerializer