profile visibility permission added

as far as i can tell, it's working