bugfixes to profile access restrictions