restrict acces to commercialupdate if user can only see his own
thirdparty
Merge pull request #1260 from FHenry/3.4

restrict acces to commercial update if user can only see his own