Adding User Profiles to Access Control