Piwigo also uses two mechanisms to restrict access to folders and photos:
User for photos
Privacy level for albums
You can mix them. For instance, everyone can access to the album, but just a few of them can view a particular photo inside the album. I believe this setup is good enough for a family.
The multi-site are the ability to have several galleries, and therefore a specific database for each gallery.