          return queryset.filter(**kwargs)
  
  
  class QueryModelResource(ModelResource):
      """Resource with default operations for list.
      TODO: provide filter/order/num_results/paging, and a create operation to create queries."""
      allowed_methods = ('GET',)
      queryset = None
 
</s> remove     def get_form(self, data=None):
        return None

 </s> add  </s> remove     allowed_methods = ('GET', 'POST')
 </s> add  </s> remove     """Mixin class to provide authentication and permissions."""
 </s> add     """Mixin class to provide authentication and permission checking.""" </s> remove             # Typically the context will be a user, or None if this is an anonymous request,
            # but it could potentially be more complex (eg the context of a request key which
            # has been signed against a particular set of permissions)
            auth_context = self.auth

            # If using a form POST with '_method'/'_content'/'_content_type' overrides, then alter
            # self.method, self.content_type, self.CONTENT appropriately.
            self.perform_form_overloading()

            # Ensure the requested operation is permitted on this resource
            self.check_method_allowed(self.method, auth_context)

            # Get the appropriate create/read/update/delete function
            func = getattr(self, self.callmap.get(self.method, None))
 </s> add             # TODO - this isn't actually the correct way to set the vary header,
            # also it's currently sub-obtimal for HTTP caching - need to sort that out. 
            response.headers['Allow'] = ', '.join(self.allowed_methods)
            response.headers['Vary'] = 'Authenticate, Accept' </s> remove             anon_allowed_methods = allowed_methods = ('GET',)
 </s> add             permissions = ()

    put = delete = http_method_not_allowed
          return queryset.filter(**kwargs)
  
    put = delete = http_method_not_allowed
  
  class QueryModelResource(ModelResource):
      """Resource with default operations for list.
      TODO: provide filter/order/num_results/paging, and a create operation to create queries."""
      allowed_methods = ('GET',)
      queryset = None
keep add keep keep keep keep keep keep
 Generic permissions added, allowed_methods and anon_allowed_methods now defunct, dispatch now mirrors View.dispatch more nicely 
djangorestframework/modelresource.py