如何使用Django restframework为从AbstractBaseUser继承的用户模型设置权限

让我们有一个我的用户模型的结构

BaseUser <- BusinessOwner <- Business Staff (BusinessOwner can create,update,delete BusinessStaff )
BaseUser <- Customer

我的观点.py

class CreateBusinessOwnerView(mixins.ListModelMixin,
              mixins.CreateModelMixin,
              generics.GenericAPIView):
    queryset = BusinessOwner.objects.all()
    serializer_class = CreateBusinessOwner

    def get(self, request, *args, **kwargs):
        return self.list(request, *args, **kwargs)

    def post(self, request, *args, **kwargs):
        return self.create(request, *args, **kwargs)

    def post_save(self, obj, created=False):
        if created:
            obj.set_password(obj.password)
            obj.save()

还有我的serializers.py

class CreateBusinessOwner(serializers.ModelSerializer):
    class Meta:
        model = BusinessOwner
        fields = ('email', 'password', 'first_name', 'last_name', 'business_name' ,'date_joined')
        read_only_fields = ('date_joined',)

谢谢你帮助我

class CreateBusinessOwner(serializers.ModelSerializer):
    class Meta:
        model = BusinessOwner
        fields = ('email', 'password', 'first_name', 'last_name', 'business_name' ,'date_joined')
        read_only_fields = ('date_joined',)