class MyModel(Model):
    foto  = models.ImageField( upload_to='/foto/',  verbose_name='Фото' )

MEDIA_ROOT = '/home/django314/project1/media/'
MEDIA_URL = '/media/'

<form  method="post"  enctype="multipart/form-data" action=".">{% csrf_token %}

http://127.0.0.1:8000/accounts/password/reset/
NoReverseMatch at /accounts/password/reset/
Reverse for 'password_reset_done' with arguments '()' and keyword arguments '{}' not found. 0 pattern(s) tried: []

http://127.0.0.1:8000/accounts/password/reset/34
Page not found (404)
Request Method: 	GET
Request URL: 	http://127.0.0.1:8000/accounts/password/reset/34
Using the URLconf defined in univ.urls, Django tried these URL patterns, in this order:
    accounts/register/$ [name='registration_register']
    ^accounts/ ^activate/complete/$ [name='registration_activation_complete']
    ^accounts/ ^activate/(?P<activation_key>\w+)/$ [name='registration_activate']
    ^accounts/ ^register/$ [name='registration_register']
    ^accounts/ ^register/complete/$ [name='registration_complete']
    ^accounts/ ^register/closed/$ [name='registration_disallowed']
    ^accounts/ ^login/$ [name='auth_login']
    ^accounts/ ^logout/$ [name='auth_logout']
    ^accounts/ ^password/change/$ [name='auth_password_change']
    ^accounts/ ^password/change/done/$ [name='auth_password_change_done']
    ^accounts/ ^password/reset/$ [name='auth_password_reset']
    ^accounts/ ^password/reset/confirm/(?P<uidb36>[0-9A-Za-z]+)-(?P<token>.+)/$ [name='auth_password_reset_confirm']
    ^accounts/ ^password/reset/complete/$ [name='auth_password_reset_complete']
    ^accounts/ ^password/reset/done/$ [name='auth_password_reset_done'] 

class MyFormUpdate(LoginRequiredMixin,generic.UpdateView):
    model = Employee
    def form_valid(self, form):
        profile_id = ...
        record_id  = ...
        if profile_id == record_userprofile_id:
            return super(MyFormUpdate, self).form_valid(form)
        else:
           raise Http404(u"Как вам не стыдно %s" % self.request.user.get_username() )

MyFormCreate(LoginRequiredMixin,generic.CreateView):
    model = MyModel
    fields = [ 'myfield2', 'myfield3' ]
    reg_user_id = ...
    myfield1 = reg_user # как-то передать значение

 initial = { 'myfield1':23 }

class MyForm(LoginRequiredMixin,generic.UpdateView):
    model = MyModel
    fields = [ 'last_name', ... ]
    class Meta:
        fields = ( 'last_name', ... )
        labels = { 'last_name': (u'Ваша фамилия'), ... }
        help_texts = { 'name': (u'Здесь укажите Вашу фамилию'), ...   }

<form action="." method="post">{% csrf_token %}
    <table>
    {{ form }}
    <tr>
        <td colspan="2"><input type="submit" value="Готово" /></td>
    </tr>
    </table>
</form>

mysql> show fields from  myapp1_exuserprofile;
+-------------------+--------------+------+-----+---------+----------------+
| Field             | Type         | Null | Key | Default | Extra          |
+-------------------+--------------+------+-----+---------+----------------+
| id                | int(11)      | NO   | PRI | NULL    | auto_increment |
| user_id           | int(11)      | NO   | UNI | NULL    |                |
| first_name        | varchar(100) | NO   |     | NULL    |                |
...

А проблема, вот она. Например, возьмем стандартную форму изменения таблицы:

class ExUserProfileFormUpdate(generic.UpdateView):
    model = ExUserProfile
    fields = '__all__'

class IndexOrganizedTables(models.Model):
    id = models.AutoField(primary_key=True)
    parent_id = выбирается_из_этой_таблицы.id
    name = models.CharField(u'Имя',max_length=250)
    def __unicode__(self):
        return self.name

>>> txt="one one two three for two"
>>> d=['one','two']
>>> w=['1','2']
>>> for a,b in zip(d,w):
...     txt=txt.replace(a,b)
... 
>>> txt
'1 1 2 three for 2'

>>> txt="one one two three for two"
>>> [ txt.replace(a,b) for a,b in zip(d,w) ]
['1 1 two three for two', 'one one 2 three for 2']