Same for updates, the controller should set the fields.