user must own a profile to edit it