188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
I can open up a task for it.