def METHOD_NAME(self, queryset=None):
    request = super().METHOD_NAME()
    if request.user != self.request.user and not self.request.user.has_perm("utils.change_hat"):
        raise PermissionDenied
    return request