https://videosashka.com/watch/5JG5PyU1CXI/restricting-access-with-permissions-django-rest-framework