Fix profile viewing authorization