Use simple permission for API
Sort the Items queryset by 'created'