fixes #7857 fix perms for profile access