Update only role with evidence attachment

Users should not be allowed to edit goal progress, leave updates, change descriptions or timeframes for goals they are not the primary owner of.