fixes #12989, better profile permission. refs CRM-14856