def get_permissions(self): # Your logic should be all here if self.request.method == 'GET': self.permission_classes = [DummyPermission, ] else: self.permission_classes = [IsAuthenticated, ] return super(UsersViewSet, self).get_permissions()