amusingly, the DRF docs show it in `get_queryset` - http://django-rest-framework.org/api-guide/filtering#filtering-against-query-parameters