User profile are visible from outside

Can’t help with crawling, as out instance is on a private network.

For the other question, have a look here: https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Access%20Rights/ I guess the available setting should help you there.