add new user profile and set permissions on some views