Deny certain user from updating certain rows
In my opinion, if you are stuck with sql server 2012, the Row Level Security is not going to work for you.

So you have two options:
1) application layer, which was already mentioned.
2) on database level, an trigger may work