users who have ability to update their profile can edit avatar