def METHOD_NAME(self, request, pk):
    qs = self.get_object()
    if qs.openid != self.request.auth.openid:
        raise APIException({"detail": "Cannot update data which not yours"})
    else:
        data = self.request.data
        serializer = self.get_serializer(qs, data=data)
        serializer.is_valid(raise_exception=True)
        serializer.save()
        headers = self.get_success_headers(serializer.data)
        return Response(serializer.data, status=200, headers=headers)