adding in permissions for profile