behruz #116
@@ -30,5 +30,5 @@ urlpatterns = [
|
|||||||
path("user/list/", UserListApiView.as_view(), name="user-list"),
|
path("user/list/", UserListApiView.as_view(), name="user-list"),
|
||||||
path("admin-user/list/", AdminUserListApiView.as_view(), name="admin-user-list"),
|
path("admin-user/list/", AdminUserListApiView.as_view(), name="admin-user-list"),
|
||||||
path("admin/create/", AdminCreateAPIView.as_view(), name="user-create"),
|
path("admin/create/", AdminCreateAPIView.as_view(), name="user-create"),
|
||||||
path("admin/update/", AdminUpdateAPIView.as_view(), name="user-update"),
|
path("admin/update/<int:pk>/", AdminUpdateAPIView.as_view(), name="user-update"),
|
||||||
]
|
]
|
||||||
|
|||||||
@@ -64,11 +64,10 @@ class AdminCreateAPIView(APIView):
|
|||||||
return Response(serializer.data, status=201)
|
return Response(serializer.data, status=201)
|
||||||
|
|
||||||
|
|
||||||
@extend_schema(tags=['User'],
|
@extend_schema(tags=['User'],)
|
||||||
responses={200: UserSerializer},
|
class AdminUpdateAPIView(generics.GenericAPIView):
|
||||||
request=UserCreateSerializer)
|
|
||||||
class AdminUpdateAPIView(APIView):
|
|
||||||
permission_classes = [IsAuthenticated]
|
permission_classes = [IsAuthenticated]
|
||||||
|
serializer_class = UserCreateSerializer
|
||||||
|
|
||||||
def put(self, request, pk):
|
def put(self, request, pk):
|
||||||
if request.user.role not in (RoleChoice.SUPERUSER, RoleChoice.ADMIN):
|
if request.user.role not in (RoleChoice.SUPERUSER, RoleChoice.ADMIN):
|
||||||
|
|||||||
Reference in New Issue
Block a user