188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
Still a nit.