code: def update_items(portal_type=None, uid=None, endpoint=None, **kw):
      
  
      # disable CSRF
      req.disable_csrf_protection()
  
      # the data to update
      records = req.get_request_data()
  
      # we have an uid -> try to get an object for it
      obj = get_object_by_uid(uid)
      if obj:
          record = records[0]  # ignore other records if we got an uid
          obj = update_object_with_data(obj, record)
          return make_items_for([obj], endpoint=endpoint)
  
      # no uid -> go through the record items
      results = []
      for record in records:
          obj = get_object_by_record(record)
  
          # no object found for this record
          if obj is None:
              continue
  
          # update the object with the given record data
          obj = update_object_with_data(obj, record)
          results.append(obj)
  
      if not results:
          fail(400, "No Objects could be updated")
  
      return make_items_for(results, endpoint=endpoint)
docs: update items
  
      1. If the uid is given, the user wants to update the object with the data
         given in request body
      2. If no uid is given, the user wants to update a bunch of objects.
         -> each record contains either an UID, path or parent_path + id