If your API has lots of different user roles (which can often break REST), this small library we built might be interesting to you: https://github.com/computer-lab/django-rest-framework-roles