Veto all operation on User except modifies of already associated objects User modify