Added permissions check to make sure only owners can change customer status to/from suspend/delete