album security and album photos (photos inside the album) security

Hello
I am not sure whether i am naif or ignorant of what is happening but i have an issue.
I have album photos module installed and working fine and i also have content_access (or in fact can check with any other node access module) module for security.
I have enabled the security for an album (xyz) as private so that only registered users can view the album.
how ever the photos inside that album can be accessed directly by everyone (anonymous) with the image url.
for ex: album xyz url is www.website.com/photos/album/123 or http://album.cmsns.com/node/123
The url for photos (images) inside the album is www.website.com/photos/image/53 and so on.

The album is not able to be accessed by anonymous user bcas it is set to private but the images inside the album can be accessed with the url of the image directly.

My doubt is if we set the album as private how can we be able to view the images inside the album as anonymous user?

Is there something i am missing here?
Please help me on this.