make public ID in merchant and product models read-only