Fixed user profile page access control