188 enforce user type

This adds in authorization checks to InnerView and AdvisorProfileView
Why do we need this?