> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.lettbestilt.no/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.lettbestilt.no/_mcp/server. # Change a news draft PATCH https://www.lettbestilt.no/api/v1/partner/news/{newsId} Content-Type: application/json **Partner key only.** Drafts only (`409 NOT_DRAFT`). Changes the fields you send. With `expectedUpdatedAt`, nothing is written if the draft changed in the meantime (`409 CHANGED`). Bound to the key's environment: a TEST key only reaches news whose recipients are all sandboxes (never `audienceAll`); a LIVE key reaches all news that is not bound to TEST (including `audienceAll` news, which on publishing is locked to the sandboxes as well). Needs a key created by an owner or administrator. Changes count in the partner's bucket of 60 per 10 minutes (shared with LettBestilt Partner). Every change is logged with ids and field names, never the text. Reference: https://docs.lettbestilt.no/api-reference/partner/update-partner-news ## Authentication - `Authorization` header (bearer token, required) — The partner key (`lbp_test_…` or `lbp_live_…`), sent as `Authorization: Bearer lbp_…` and created in LettBestilt Partner under **Partner key**. It belongs to the whole partner, not to a restaurant, and only works against `/api/v1/partner`. Server to server only: a request with an `Origin` header is rejected with `403 FORBIDDEN`, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (`lbs_…`) here give `401 UNAUTHORIZED`; an expired key gives `401 KEY_EXPIRED`. ## Request ### Path parameters - `newsId` (string, required) — The news item's `id` from `GET /news` or `POST /news`. ### Body (application/json) This endpoint expects a PartnerNewsPatch. - `title` (string, optional) - `body` (string, optional) — Markdown. Images only from LettBestilt (otherwise `422 IMAGE_NOT_ALLOWED`). - `level` (enum, optional) - Allowed values: `INFO`, `UPDATE`, `WARNING` - `audienceAll` (boolean, optional) — `true` = all the restaurants the partner can reach when the news is published (locked then). Only with a LIVE key; with a TEST key, `true` gives 422. - `sendEmail` (boolean, optional) — Also email the owners when the news is published. Default `true`. - `restaurantSlugs` (list of string, optional) — The recipients as the restaurants' slugs (required when `audienceAll` is false). TEST key: sandboxes only; LIVE key: real restaurants only. A slug that is not one of the partner's restaurants in the key's environment that can be reached now gives `404 RESTAURANT_NOT_FOUND`. LettBestilt Partner calls the field `restaurantIds`; the API rejects that name. - `expiresAt` (date, optional, nullable) — Hidden after this day (Oslo time, `YYYY-MM-DD`). `null` = shown until archived. - `expectedUpdatedAt` (datetime, optional) — `updatedAt` from GET. If the object has changed since, `409 CHANGED` and nothing is written. Without it, nothing is checked. ## Response ### 200 The draft after the change. - `data` (PartnerNews, required) ## Errors ### 400 Bad Request Error `INVALID_JSON`: the body is not valid JSON. - `error` (ErrorBody, required) ### 401 Unauthorized Error `UNAUTHORIZED`: the partner key is missing, invalid or revoked, or the partner is suspended or archived. `KEY_EXPIRED`: the key is past its expiry date. - `error` (ErrorBody, required) ### 403 Forbidden Error `KEY_ROLE_FORBIDDEN`: the person who created the key is no longer an owner or administrator in the partner team (`error.details.capability` is `news.manage`). `PARTNER_NEWS_FORBIDDEN`: only external partners have news. Or as for reading: `FORBIDDEN` (`Origin` header), `PARTNER_AGREEMENT_REQUIRED` or `PARTNER_NOT_APPROVED`. - `error` (ErrorBody, required) ### 404 Not Found Error `NEWS_NOT_FOUND`, or `RESTAURANT_NOT_FOUND` for one of `restaurantSlugs`. - `error` (ErrorBody, required) ### 409 Conflict Error `NOT_DRAFT`, `CHANGED` or `PARTNER_ARCHIVED`. - `error` (ErrorBody, required) ### 422 Unprocessable Entity Error `VALIDATION_FAILED` with `error.details.issues`, or `IMAGE_NOT_ALLOWED`. - `error` (ErrorBody, required) ### 429 Too Many Requests Error `RATE_LIMITED`: more than 120 calls per minute for this partner key, or more than 600 per minute for the partner across all its keys; all writes also share the partner's bucket of 30 changes per minute per environment. - `error` (ErrorBody, required) ## Types ### PartnerNews - `id` (string, required) - `title` (string, required) - `level` (enum, required) - Allowed values: `INFO`, `UPDATE`, `WARNING` - `status` (enum, required) - Allowed values: `DRAFT`, `SCHEDULED`, `PUBLISHED`, `ARCHIVED` - `audienceAll` (boolean, required) - `sendEmail` (boolean, required) - `restaurantSlugs` (list of string, required) — The recipients the partner still owns. After publishing: the restaurants the news was locked to. - `scheduledAt` (datetime, required, nullable) - `publishedAt` (datetime, required, nullable) - `expiresAt` (date, required, nullable) — The day in Oslo time, `YYYY-MM-DD`. - `createdAt` (datetime, required) - `updatedAt` (datetime, required) — Send it as `expectedUpdatedAt` in PATCH. - `reads` (PartnerNewsReads, required, nullable) — For published and archived news: the recipient restaurants and how many of them have read it (at least one user in the restaurant). Never who. `null` for drafts and scheduled news. - `body` (string, optional) — Only in `GET /news/{newsId}` and the responses to writes. ### ErrorBody - `code` (enum, required) — A machine-readable error code. - Allowed values: `MISSING_SLUG`, `MISSING_TOKEN`, `INVALID_JSON`, `INVALID_SUCCESS_URL`, `INVALID_CANCEL_URL`, `VALIDATION_FAILED`, `RESTAURANT_NOT_FOUND`, `ORDER_NOT_FOUND`, `RATE_LIMITED`, `BAD_REQUEST`, `UNAUTHORIZED`, `FORBIDDEN`, `INSUFFICIENT_SCOPE`, `KEY_EXPIRED`, `POPUP_NOT_AVAILABLE`, `PRICE_CHANGED`, `PAYMENT_INCOMPLETE`, `PAYMENT_PENDING`, `PAYMENT_PROVIDER_INVALID`, `FULFILLMENT_NOT_ALLOWED`, `IDEMPOTENCY_CONFLICT`, `DINE_IN_DISABLED`, `PARTY_TOO_LARGE`, `TOO_EARLY`, `NO_TABLE`, `INVALID_PARTY_SIZE`, `INTERNAL_ERROR`, `PARTNER_AGREEMENT_REQUIRED`, `IDEMPOTENCY_KEY_REQUIRED`, `SLUG_TAKEN`, `SANDBOX_LIMIT`, `RETENTION`, `RESTAURANT_ARCHIVED`, `KEY_NOT_FOUND`, `KEY_IN_USE`, `WEBHOOK_NOT_FOUND`, `WEBHOOK_LIMIT`, `CHANGED`, `PDF_TOO_LARGE`, `PDF_INVALID`, `PDF_PASSWORD`, `PDF_TOO_MANY_PAGES`, `PDF_NO_TEXT`, `PDF_PARSE_TIMEOUT`, `MENU_IMPORT_EMPTY`, `FILE_UNSUPPORTED`, `IMAGE_HEIC`, `IMAGE_INVALID`, `IMAGE_DIMENSIONS`, `MENU_IMPORT_UNAVAILABLE`, `MENU_IMPORT_AI_LIMIT`, `MENU_IMPORT_TOO_BIG`, `MENU_IMPORT_NOT_FOUND`, `MENU_IMPORT_CLOSED`, `PARTNER_NOT_APPROVED`, `PARTNER_DATA_LOCKED`, `DOMAIN_NOT_FOUND`, `DOMAIN_TAKEN`, `DOMAIN_LIMIT`, `DOMAIN_MANAGED`, `DOMAIN_NOT_VERIFIED`, `OWNER_EXISTS`, `OWNER_EMAIL_NOT_ALLOWED`, `OWNER_INVITE_NOT_FOUND`, `SANDBOX_NOT_SUPPORTED`, `INVITE_SEND_FAILED`, `GO_LIVE_NOT_REQUIRED`, `GO_LIVE_NOT_READY`, `GO_LIVE_CHECKS_FAILED`, `GO_LIVE_ALREADY_REQUESTED`, `GO_LIVE_ALREADY_APPROVED`, `GO_LIVE_NOTHING_TO_WITHDRAW`, `DEMO_RESTAURANT`, `LEGAL_LOCKED`, `HOURS_OVERRIDE_NOT_FOUND`, `HOURS_OVERRIDE_LIMIT`, `DELIVERY_ZONE_NOT_FOUND`, `DELIVERY_ZONE_LIMIT`, `MENU_NOT_FOUND`, `MENU_IS_DEFAULT`, `CATEGORY_NOT_FOUND`, `PRODUCT_NOT_FOUND`, `ADDON_GROUP_NOT_FOUND`, `CATEGORY_NOT_EMPTY`, `CATEGORY_LIMIT`, `PRODUCT_LIMIT`, `ADDON_GROUP_LIMIT`, `KEY_ROLE_FORBIDDEN`, `WHITE_LABEL_REQUIRED`, `LOGO_NOT_ALLOWED`, `FILE_TOO_LARGE`, `UPLOAD_FAILED`, `PARTNER_ARCHIVED`, `PARTNER_NEWS_FORBIDDEN`, `NEWS_NOT_FOUND`, `NOT_DRAFT`, `NOT_PUBLISHED`, `NOT_SCHEDULED`, `NOT_CLAIMABLE`, `NO_RECIPIENTS`, `IMAGE_NOT_ALLOWED`, `SENDER_DOMAIN_ALREADY_SET`, `SENDER_DOMAIN_NOT_SET`, `DOMAIN_EXISTS`, `SENDER_DOMAIN_REJECTED`, `EMAIL_SERVICE_UNAVAILABLE`, `HUMAN_REQUIRED`, `LENGTH_REQUIRED`, `PAYLOAD_TOO_LARGE` - `message` (string, required) — A human-readable explanation, often in Norwegian. For business rules it is usually suitable to show the customer. - `requestId` (string, required) — The same value as the `X-Request-Id` response header. Search for it in the API log in LettBestilt Partner, and include it when you contact LettBestilt. - `details` (any, optional) — Extra data for some codes, for example `issues` for `VALIDATION_FAILED`, the totals for `PRICE_CHANGED` or `requiredScope` for `INSUFFICIENT_SCOPE`. ### PartnerNewsReads For published and archived news: the recipient restaurants and how many of them have read it (at least one user in the restaurant). Never who. `null` for drafts and scheduled news. - `restaurants` (integer, required) - `read` (integer, required) ## Examples **Request** ```json {} ``` **Response** ```json { "data": { "id": "string", "title": "string", "level": "INFO", "status": "DRAFT", "audienceAll": true, "sendEmail": true, "restaurantSlugs": [ "string" ], "scheduledAt": "2024-01-15T09:30:00Z", "publishedAt": "2024-01-15T09:30:00Z", "expiresAt": "2023-01-15", "createdAt": "2024-01-15T09:30:00Z", "updatedAt": "2024-01-15T09:30:00Z", "reads": { "restaurants": 1, "read": 1 }, "body": "string" } } ``` **SDK Code** ```python import requests url = "https://www.lettbestilt.no/api/v1/partner/news/newsId" payload = {} headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.patch(url, json=payload, headers=headers) print(response.json()) ``` ```javascript const url = 'https://www.lettbestilt.no/api/v1/partner/news/newsId'; const options = { method: 'PATCH', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://www.lettbestilt.no/api/v1/partner/news/newsId" payload := strings.NewReader("{}") req, _ := http.NewRequest("PATCH", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby require 'uri' require 'net/http' url = URI("https://www.lettbestilt.no/api/v1/partner/news/newsId") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Patch.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{}" response = http.request(request) puts response.read_body ``` ```java import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.patch("https://www.lettbestilt.no/api/v1/partner/news/newsId") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{}") .asString(); ``` ```php request('PATCH', 'https://www.lettbestilt.no/api/v1/partner/news/newsId', [ 'body' => '{}', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp using RestSharp; var client = new RestClient("https://www.lettbestilt.no/api/v1/partner/news/newsId"); var request = new RestRequest(Method.PATCH); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://www.lettbestilt.no/api/v1/partner/news/newsId")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "PATCH" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```