The form which is being sent to customer is public and customer doesn't need to register/log into Salesforce to update it and hence we need to provide access.