Perhaps try stepping the “Update” workflow through the debugger. Have you checked privacy rules?