profile permissions tweaks