refs#63 profile permissions set