Comment by aerovistae

It was because I needed to run validation over the inputs sent to the server, and then update other data which the user themself did not have authorization to access.