User can only edit certain fields