By default, all attributes except 'createdAt' can be updated