188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
already done in the most recent commit. My apologies