Add IsUserOrSuperuser permission to UserDetail API view.