def METHOD_NAME(self, request, pk=None):
    # Check user permission first
    if not request.user.has_perm("extras.view_exporttemplate"):
        return Response(status=status.HTTP_403_FORBIDDEN)
    return Response(data={"rendered": self.get_object().render()})