fixed security bug in editing. (restrict editable profile to current profile)