added permission check for update profile field function