Change `profile` to `user`. The `permissions` method always takes a parameter named `user`.