While this may not fit with the solution you guys are working on, it's still something to consider.
When the user calls up his or her profile page, the recordset that populates the page is usually based on the User ID session variable. So even if an Admin had access to the page, it would still populate with the Admins info. That's why there shold be an Admin backend to update users. You don't need Dataassist for this, just an admin homepage with the typical search-results-detail pages.
The results page passes the Uder ID in the query string to the detail page. the detail page can be an exact duplicate of the profile page except that the recordset is based on the query string parameter, and not the UserID session variable.
