Deny updates on all fields except hotel name and website.