Allow updating only state for workflow