Packer can change data on shipment

When a shipment has been created (e.g. https://demo-stable.ofbiz.apache.org/facility/control/ViewShipment?shipmentId=10005), a packer can edit the details via editShipment, including (but not limited to) changing the customer and cost involved.

This should not be possible