further enforced user profile/admin privileges