fixes #10 : data exported in profile handler is filtered according to ACL