def change_role(actor, owner, record, role):
    """Only owner is allowed to update record."""
    if actor != owner:
        raise PermissionError("not owner")
    record["role"] = role
