views.py

from django.shortcuts import render, get_object_or_404
from django.contrib.auth import get_user_model

# 3rd party imports
from rest_framework import viewsets, permissions, response, status
from rest_framework.authtoken.models import Token
from rest_framework.views import APIView

# My app imports
from accounts.serializers import UserSerializer

# User Viewset for create, update, delete, retrieve
class UserViewSet(viewsets.ModelViewSet):
    serializer_class = UserSerializer 
    
    def get_queryset(self):
        if self.request.user.is_superuser:
            return get_user_model().objects.all()
        else:
            return get_user_model().objects.filter(id=self.request.user.id)

    def get_object(self):
        obj = get_object_or_404(self.get_queryset(), pk=self.kwargs["pk"])
        self.check_object_permissions(self.request, obj)
        return obj