Added user role permission check for update