This patch here
included a link on /user to easily get to /user/nnn/edit/civicrm_profile. However this link was removed from the final patch.
Just wondering why you decided to remove the edit link. I think having the link makes things more usable since there is no obvious way to get to the profile edit page. The user might be inclined to click the edit tab, but then they might not see the secondary tab for editing the CiviCRM profile.
My understanding of CiviCRM permissions is that if the user does not have permission to edit the profile, they won't even see it. Thus it isn't possible that this link will point to a 403.
The only thing that I can think of is that it is possible for a profile to contain fields that are all read-only for the user. In which case it is just that the word "edit" should maybe be "view details", but this is difficult to determine without actually loading the entire profile.
I originally did look at adding the link in Templates/CRM/Profile/Dynamic.tpl, however this template isn't fed enough data to be able to create a link. Also I'm not sure where else this template is used that may be effected.
Perhaps the link just needs to be conditionally created in advance in whatever calls this template if we are at /user or /user/nnn (I couldn't find the class uses this template).
lobo et all: let me know what you think and I can probably roll a patch.