fix the bug lacking the access control to update model