prevent updates to customer records based on ownership