- wip: add update for edit endpoint

Author: koladev32

api/user/serializers.py

@@ -8,3 +8,4 @@ class UserSerializer(serializers.ModelSerializer):
     class Meta:
         model = User
         fields = ['id', 'username', 'email', 'date']
+        read_only_field = ['id']

api/user/viewsets.py

@@ -1,15 +1,42 @@
 from api.user.serializers import UserSerializer
-from rest_framework import viewsets
+from api.user.models import User
+from rest_framework import viewsets, status
 from rest_framework.permissions import IsAuthenticated
-from rest_framework.decorators import action
 from rest_framework.response import Response
+from rest_framework.exceptions import ValidationError
 from rest_framework import mixins
 
 
-class UserViewSet(viewsets.GenericViewSet, mixins.CreateModelMixin):
+class UserViewSet(viewsets.GenericViewSet, mixins.CreateModelMixin, mixins.UpdateModelMixin):
     serializer_class = UserSerializer
-    permission_classes = (IsAuthenticated, )
+    permission_classes = (IsAuthenticated,)
+
+    def update(self, request, *args, **kwargs):
+        partial = kwargs.pop('partial', True)
+        instance = User.objects.get(id=request.data.get('userID'))
+        serializer = self.get_serializer(instance, data=request.data, partial=partial)
+        serializer.is_valid(raise_exception=True)
+        self.perform_update(serializer)
+
+        if getattr(instance, '_prefetched_objects_cache', None):
+            instance._prefetched_objects_cache = {}
+
+        return Response(serializer.data)
 
     def create(self, request, *args, **kwargs):
-        pass
+        user_id = request.data.get('userID')
+
+        if not user_id:
+            raise ValidationError({"user": "Precise an ID."})
+
+        if self.request.user.pk != user_id and not self.request.user.is_superuser:
+
+            raise ValidationError({
+                "success": False,
+                "msg": "Error updating user"
+            })
+        self.update(request)
 
+        return Response({
+            "success": True
+        }, status.HTTP_200_OK)