Django: Require admin approval for patch and post
You have to store the request user somewhere, several solutions:

A new model in your database
A new field is_validated on your model
Store that in cache (not safe)
I'm trying to write my REST API in Django so that if someone makes a patch or post it will require someone with access to Django's admin panel to actually write the changes, but it'll be pending and visible to the admin till then, is this possible? Or do I have to create a model for the pending request then make the patch and post create new entities?