createdAt and updatedAt should be read only