def patch(self, data): website = Manager(Website).get(pk=self.kwargs["pk"]) if website.customer.pk != self.customer.pk: return self.response({"error": "Not allowed"}) if "url" not in data: return self.response({"error": "missing website url"}) website.url = data["url"] website.save() return self.response({"success": "website updated"})