Protect users from modifying state_id via mischevious methods if they shouldn't have permission to do so