add custom validations for owner role

* edit role information for user
yes. I don't want anyone to change the owner's role