Added access checks for profile operations