I'm not sure of the answer to this other than if you want to ensure current_user owns the profile you could do current_user.parent_profile ?