Added user_pk to StudentInfoSerializer / new /user/<pk>/change_active/ route

core/serializers/student.py

@@ -26,6 +26,7 @@ class StudentInfoSerializer(DynamicFieldsModelSerializer):
 class StudentInfoSerializerForListView(DynamicFieldsModelSerializer):
     name = serializers.ReadOnlyField(source='user.fullname')
     user = serializers.ReadOnlyField(source='user.username')
+    user_pk = serializers.ReadOnlyField(source='user.pk')
     exam = serializers.ReadOnlyField(source='exam.module_reference')
     submissions = SubmissionNoTextFieldsSerializer(many=True)
     is_active = serializers.BooleanField(source='user.is_active')
@@ -35,6 +36,7 @@ class StudentInfoSerializerForListView(DynamicFieldsModelSerializer):
         fields = ('pk',
                   'name',
                   'user',
+                  'user_pk',
                   'exam',
                   'submissions',
                   'matrikel_no',

core/views/common_views.py

@@ -211,3 +211,18 @@ class UserAccountViewSet(viewsets.ReadOnlyModelViewSet):
     def me(self, request):
         serializer = self.get_serializer(request.user)
         return Response(serializer.data, status=status.HTTP_200_OK)
+
+    @detail_route(methods=['patch'])
+    def change_active(self, request, *args, **kwargs):
+        active = request.data.get('is_active')
+        req_user = request.user
+        user = self.get_object()
+        if active is None:
+            error_msg = "You need to provide an 'active' field"
+            return Response({'Error': error_msg}, status.HTTP_400_BAD_REQUEST)
+        if (req_user.is_student() or req_user.is_tutor()) and req_user != user:
+            return Response(status.HTTP_403_FORBIDDEN)
+        user.is_active = active
+        user.save()
+        return Response(status.HTTP_200_OK)
+