title: Problems with Django rest-framework DjangoModelPermissions allowing any authenticated user
body: <p>I am trying to use DjangoModelPermissions and it does not seem to work properly.</p>
  
  <p>This is the code:</p>
  
  <pre><code>class TestViewSet(viewsets.ModelViewSet):
      model = Test
      serializer_class = serializers.TestSerializer
      permission_classes = (permissions.DjangoModelPermissions,)
  
      def create(self, request):
          response_data = {}
          response_data['type'] = 'error'
          data=json.loads(request.raw_post_data)
  
          test = Test.objects.create(name=data['name'],\
                                              description=data['description'],\
                                              start_date=data['start_date'],\
                                              end_date=data['end_date'])          
  
          #save changes
          test.save()
          return Response({'status': 'ok', "result": test.id})
  </code></pre>
  
  <p>I don't think it makes any difference in this case but I am using django_mongodb_engine.</p>
  
  <p>I have a user that has no permissions, and it is able to create Test instances. On the other hand, how can I block also GET so just users with the right permissions can perform that action?</p>
  
  <p>Thanks</p>