fixed non-public profile test
added access permissions spec