added permissions for profile