Instead of this function, checks for permissions should use `user_access('view member friends')`