title: Django: UpdateView restrict per user
body: <p>I have a site where users can create and edit their own lists.</p>
  
  <p>I'm using the generic view CreateView to allow users to create lists.</p>
  
  <p>I would like to use the generic view UpdateView to allow them to edit the lists, but the <code>login_required=True</code> is not enough in this case, since only the list creator can edit his/her list.</p>
  
  <p>2 questions:</p>
  
  <p>1) is there any parameter that I can specify in the URLconf to add this restrictions?</p>
  
  <p>2) can I impose the those generic views should only work with POST and not GET?</p>
  
  <p>Thanks</p>