from django.views.decorators.http import require_http_methods

@require_http_methods(['GET'])
def list_password(request):
    if not request.user.is_superuser:
        # return with error
    else:
        # return data

@require_http_methods(['PATCH'])
def update_password(request):
   if not request.user.is_superuser:
       # return with error
   else:
       # update user password