allow user to update its own record