diff --git a/api/patch_request.py b/api/patch_request.py
index c33e0af277c17e2a27a9b8a60f9e017385889225..7541882e0ef9516fe2fb7d9a383c1907172142ea 100644
--- a/api/patch_request.py
+++ b/api/patch_request.py
@@ -146,6 +146,13 @@ async def handle_request(patch_request_form_request: PatchRequestFormRequest,
 
 def validate_patch_request_actions(conn, user, actions: list[APIPatchRequestAction]) -> list[PatchRequestAction]:
     internal_actions = []
+    host_is_prod = db.host_omdl.OP_ENV_IS_PROD
+    if not host_is_prod and not user.has_permission(conn, 'wapi.devel_versions_user'):
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail='This is the development site! '
+                   'Please use patch request on the production site (https://netvs.scc.kit.edu)'
+        )
     for action in actions:
         internal_action = PatchRequestAction()
         # TODO handle unpatch vs missing parameters