Django rest-framwork [视图]：用户只能更新他们创建的模块

from rest_framework.views import APIView
from rest_framework.response import Response
from rest_framework import status
from .models import Module
from .serializers import ModuleSerializer

class ModuleDetailAPIView(APIView):
    def get_object(self, pk):
        try:
            return Module.objects.get(pk=pk)
        except Module.DoesNotExist:
            raise status.HTTP_404_NOT_FOUND

    def get(self, request, pk):
        module = self.get_object(pk)
        serializer = ModuleSerializer(module)
        return Response(serializer.data)

    def update(self, request, pk):
        module = self.get_object(pk)
        
        # 检查用户是否是模块的创建者
        if module.created_by != request.user:
            return Response("You are not allowed to update this module.", status=status.HTTP_403_FORBIDDEN)
        
        serializer = ModuleSerializer(module, data=request.data, partial=True)
        if serializer.is_valid():
            serializer.save()
            return Response(serializer.data)
        return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)