title: Django REST - Serialize User.get_all_permissions
body: <p>I am building an application with a Django Rest backend, and a VueJS front end and am working through authorization and authentication.  I have the authentication working well, but am a bit stuck on letting the front end (VueJS) know what the user has authorization to do in terms of Add/Change/View/Delete for a model.  For example, if a user cannot add a customer, I don't want to show the 'Add Customer button'.</p>
  
  <p>Working through the Django docs, and solutions on StackOverflow, I believe the simplest way is to send the user's permissions from Django to VueJS.</p>
  
  <p>The 'best'/'simplest' way I can see to get the permissions is with the following:</p>
  
  <pre><code>    userModel = User.objects.get(request.user)
      return User.get_all_permissions(userModel)
  </code></pre>
  
  <p>Where I am stuck is exactly where to put this logic and how to serialize it.  Does the above belong in the View, Serializer, other?  Up until now, I have only been working with Models (ModelSerializers and ModelViews), but I don't believe this falls into this category.</p>
  
  <p>Thanks in advance...</p>