text: from rest_framework.decorators import api_view
  from rest_framework.response import Response
  from django.views.decorators.csrf import csrf_exempt
  from rest_framework import status
  from docman.models import User
  from docman.serializers import UserSerializer
  
  # Create your views here.
  @csrf_exempt
  @api_view(['GET', 'POST'])
  def user_list(request):
      """
      List all access types, or create a new access type.
      """
      if request.method == 'GET':
          user = User.objects.all()
          serializer = UserSerializer(user, many=True)
          return Response(serializer.data)
  
      elif request.method == 'POST':
          serializer = UserSerializer(data=request.data)
          if serializer.is_valid():
              serializer.save()
              return Response(serializer.data, status=status.HTTP_201_CREATED)
          return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
  
  @csrf_exempt
  @api_view(['GET', 'PUT', 'DELETE'])
  def user_detail(request, pk):
      """
      Retrieve, update or delete a code snippet.
      """
      try:
          user = User.objects.get(pk=pk)
      except User.DoesNotExist:
          return Response(status=status.HTTP_404_NOT_FOUND)
  
      if request.method == 'GET':
          serializer = UserSerializer(user)
          return Response(serializer.data)
  
      elif request.method == 'PUT':
          serializer = UserSerializer(user, data=request.data)
          if serializer.is_valid():
              serializer.save()
              return Response(serializer.data)
          return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
  
      elif request.method == 'DELETE':
          user.delete()
          return Response(status=status.HTTP_204_NO_CONTENT)
  