IsAuthenticatedOrReadOnly permission set to base view set