Username is mutable and can be updated/changed via REST API
Username is mutable and can be updated/changed via REST API.
Is it on purpose? Do we rely anywhere on username?
Suggestion: make it immutable for now
Updated by email@example.com about 5 years ago
Since we don't really have a full design for how users should work, I think we should remove the create & update mixins from the viewset, leaving a single "admin" user that is immutable.
This isn't at all what we want eventually, but it puts us in a great position to do whatever we need to in a backwards compatible way.