BookViewSet + BookSerializer

from rest_framework.permissions import IsAuthenticated
from rest_framework import serializers
from .serial import BookSerializer
from .models import Book

class BookSerializer (serializers.ModelSerializer):
    creator = serializers.ReadOnlyField (source='creator.username', allow_null=True)
    class Meta:
        fields = ['id', 'title', 'category', 'publisher', 'isbn', 'creator']
        model = Book



class BookViewSet (viewsets.ModelViewSet):
    """ Handles creating, reading and updating Book records """
    serializer_class = BookSerializer
    queryset = Book.objects.all()
    authentication_classes = [drf_perms.SessionCsrfExemptAuthentication] ## disable CSRF check.

    permission_classes = (IsAuthenticated, )

    def perform_create(self, serializer):
        serializer.save(creator=self.request.user)

    def perform_update(self, serializer):
        serializer.save(creator=self.request.user)

    def get_queryset(self):
        creator_queryset = self.queryset.filter(creator=self.request.user)
        return creator_queryset