async def patch(self):
        uuid = self.request.match_info['uuid']

        data = await self.request.json()
        allowed_props = ['username', 'fullname', 'email', 'personal_email', 'password', 'groups']
        changes = {key: value for key, value in data.items() if key in allowed_props}

        record = await self.request.app['users'].patch(uuid, changes)
        if record:
            await self.request.app['tasks'].create({
                'name': 'sync_user',
                'context': record.to_dict(),
            })
            return json_response(record, headers={'Access-Control-Allow-Origin': '*'})

        raise web.HTTPNotFound(headers={'Access-Control-Allow-Origin': '*'})