def retrieve(self, request, *args, **kwargs):
        return super(UserViewSet, self).retrieve(request, *args, **kwargs)
User fields can be updated by account owner or user with staff privilege (is_staff=True).
dataset/ETHPy150Open opennode/nodeconductor/nodeconductor/structure/views.py/UserViewSet.retrieve