Make it impossible to edit whatever user should not edit
Add forms for adding permissions
Make profile not accessible from Admin panel