Set permisions on user view route

A user with permission can see every user's profile.
A user can see their own profile.
A non-user cannot see any profiles.