Only show settings link on user and plot profiles when you have control over the profile. Implemented correctly this time using CanCan ACL rules.