validator can reject changes