https://medium.com/@pgiridharan2002/groups-and-permissions-in-django-rest-framework-secure-your-apis-like-a-pro-f8aee6e69222