But removing via JS is "layout" only, not security.
You can restrict access to an access level.
If you need to restrict to records belonging to single users you can use a copy of your list, add a prefilter to show only the user's records and add the update_col to this list.