Restrict user updates