added permissions
added profile click function