https://gpttutorpro.com/working-with-permissions-and-authentication-in-django-rest/