I found a solution based on the example in REST API guide: http://www.django-rest-framework.org/api-guide/permissions/#examples
-- You received this message because you are subscribed to the Google Groups "Django users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/django-users. To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/ad0235e4-87d9-450e-be7e-44b965b65e13%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.

