Why we need to filter out the req.body in updateOwn

[Vishwas-75]

If any particular role is inaccessible for certain attributes then it should throw an error right.
Why we need to filter out the req.body??