Apply the customizing permission class for post retreive request.
(AllowAny for GET, IsAuthenticated for rest)