Fix permission to access user profiles #1449