You can just set the [default setting](http://django-rest-framework.org/api-guide/permissions#setting-the-permission-policy) to this since we don't currently have any plans of opening up the API for this.

Also I'd suggest using both `IsAdminUser` and `DjangoModelPermissions` so that admin users who can't write to certain models can't write to them via the API either.