Lock entities that user is not permitted to unpublish