def pre_save(self, obj):
    data = self.request.DATA['users']
    for user in data:
        if not user in allowed_users:
            raise ParseError('An unpermitted user has been included')