Added permissions to access users profile