The db and it's records can be secured against changes implementing Jet
Security (see access help) to restrict user permissions. If the hyperlink
launches an image editing program you'll not be able to stop the images being
changed or deleted (this also applies to actions through Explorer or any
other File Manager) unless you set the folder file sharing permissions (see
file sharing help re your OS) to read only for everybody except selected
users.
If the images and database are in a folder like this restricted users won't
be able to edit the database unless you explicitly set permissions on that
file. Also, compacting the database will result in the file permissions
changing for the folder containing it (at least in XP SP2 with NTFS:
http://support.microsoft.com/default.aspx?scid=kb;en-us;295234&Product=acc ).
So, to avoid these complications it'd be better to have three folders:
1. A folder containing your database;
2. A folder containing your image files; and
3. A parent folder for both of these folders.
You'll then be able to set the appropriate file sharing permissions on all
three folders (and their files) without having to set explicit file
permissions, thereby reducing your admin tasks in the long run.