Viewing your own profile shouldn't really be a permission