Profile Links Shown Without Checking Access

Profile links are shown on username theming without checking if the current user has access to view profiles. Add the access check before applying the link, e.g. from fb_connect.module

function theme_fb_connect_fbml_username($orig_username, $object, $fbu) {
  $fbml = "<fb:name linked=false useyou=false uid=$fbu ifcantsee='$object->name'></fb:name>";
  $wrap_pre = "<span class=fb_connect_hide>$orig_username</span><span class=fb_connect_show style='display:none'>";
  $wrap_post = "</span>\n";
  if (user_access('access user profiles') && $object->uid) {
    // Provide link if local account.
    $wrap_pre = $wrap_pre . '<a href="' . url('user/' . $object->uid) . '">';
    $wrap_post = '</a>' . $wrap_post;
  }
  return $wrap_pre . $fbml . $wrap_post;
}