Index: modules/user.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/user.module,v
retrieving revision 1.454.2.18
diff -u -p -r1.454.2.18 user.module
--- modules/user.module 10 Aug 2005 20:37:19 -0000  1.454.2.18
+++ modules/user.module 29 Nov 2005 18:48:14 -0000
@@ -1240,9 +1240,12 @@ function user_page() {
           print theme('page', user_login($edit));
         }
       }
-      else {
+      elseif (user_access('access user profiles') || ($user->uid == arg(1))) {
         user_view(arg(1));
       }
+      else {
+        drupal_access_denied();
+      }
   }

 }