I added this because I am yet to create an Association and Dissociation request. A user that is not associated/linked with a staff, we should not allow user to update the staff, if he tried to I throw exception. What do you think?