CRM-13179 make profile api respect contact permission