[BUG] Post and User very easily editable

[subodhk01]

• No permission set for any level of user.
• Anyone can edit profile of any User as well as delete any Posts.
• /{username}/edit -> this url in user/urls.py can be user to edit profile of any user.
• /{post-id}/delete -> this url in post/urls.py can be used to delete any post.

This issue is no criticism, just pointing out some flaws. Great work by the way.
Do remember to follow on @subodhk01

[dev-lovedeep]

hey subodhk01,
thanks for bringing these bugs to my notice, I was aware of the edit bug but delete other user profiles is a new one. currently, I was not able to figure out a soln for that.
I would be very happy if u like to help to resolve these errors.
by the way, I am from MNNIT ALLAHABAD

[subodhk01]

Initially I would love if you would merge the #3 PR and analyse the changes there.

[dev-lovedeep]

ok I have merged the changes