Only update `is_active`, `is_staff` and `is_superuser`

program/serializers.py

@@ -36,7 +36,7 @@ class UserSerializer(serializers.ModelSerializer):
 
     class Meta:
         model = User
-        fields = '__all__'
+        fields = ('username', 'first_name', 'last_name', 'email', 'is_staff', 'is_active', 'password', 'profile')
 
     def create(self, validated_data):
         """
@@ -68,8 +68,6 @@ class UserSerializer(serializers.ModelSerializer):
         instance.email = validated_data.get('email', instance.email)
 
         if user.is_superuser:
-            instance.groups = validated_data.get('groups', instance.groups)
-            instance.user_permissions = validated_data.get('user_permissions', instance.user_permissions)
             instance.is_active = validated_data.get('is_active', instance.is_active)
             instance.is_staff = validated_data.get('is_staff', instance.is_staff)
             instance.is_superuser = validated_data.get('is_superuser', instance.is_superuser)