Changed permission check for seeing a user's bookings on profile