If a user sends the profile command without specifying any values for 'slowms', 'sampleRate', or 'filter', they just want to read the setting and can do so with a lower permission. The code to check this doesn't look right - it seems to be forgetting to check whether 'filter' is set.