title: DRF: how to not allow create() in Serializer
body: <p>I'm working with DRF and have a ViewSet where I want to allow all the possible actions (list, details, update, delete), except <code>create()</code>.</p>
  
  <p>This is what I have for the moment:</p>
  
  <pre><code>class FooViewSet(viewsets.ModelViewSet):
  
      queryset = Foo.objects.order_by('-date_added').all()
      serializer_class = FooSerializer
  
      def create(self, request):
          return Response(status=status.HTTP_405_METHOD_NOT_ALLOWED)
  
      def update(self, request, pk=None):
          version = get_object_or_404(Foo, pk=pk)
          html = request.data.get('html')
          version.update_content(html)
          return Response(data={
              'id': version.id,
              'name': version.name,
              'description': version.description,
              'html': version.content,
          }, status=status.HTTP_200_OK)
  </code></pre>
  
  <p>I know I could make the serializer inherit from <code>ReadOnlyModelViewSet</code> but then I wouldn't be able to update it.</p>
  
  <p>So what is the cleanest way of not allowing to <code>create()</code>?</p>