Tables and queries are for storage and behind.the-screen manipulation of data only.
Users should only have access to data via forms and reports, where you can implement logic to do whatever you want. So base a form on your query, to only change/add data