add custom validations for owner role

* edit role information for user
the key thing to remember is that the record here is necessary referring to the current_user