admin.py

from django.contrib import admin
from django.apps import apps
from bulk_importer import models

BULKABLE_MODELS = []


class BulkableAdmin(admin.ModelAdmin):
    readonly_fields = ('created_at', 'updated_at', 'imported_from')


for model in apps.get_models():
    if issubclass(
            model,
            models.BulkableImmutable) and not model._meta.abstract:
        BULKABLE_MODELS.append(
            '.'.join([
                model._meta.app_label,
                model._meta.model_name]))
        if issubclass(model, models.Bulkable):
            admin.site.register(model, BulkableAdmin)


class BulkImportAdmin(admin.ModelAdmin):
    pass


admin.site.register(models.BulkImport, BulkImportAdmin)

pytest.py

import bulk_importer.admin as bi_admin
from bulk_importer import views

@pytest.mark.django_db
def test_pandas_views_generator_with_wrong_model(token, mocker):
    kwargs = {'app_label': 'bulk_importer',
              'model_name': 'examplefortesting', }
    url = reverse_lazy('dataframe-api', kwargs=kwargs)
    factory = APIRequestFactory()
    request = factory.get(url)
    force_authenticate(request, user=token.user, token=token)
    with mock.patch.object(bi_admin, 'BULKABLE_MODELS', []):
        response = views.model_for_pandas_view_generator(
            request, 'bulk_importer', 'examplefortesting')
assert response.status_code == 403

views.py

from bulk_importer.admin import BULKABLE_MODELS

def model_for_pandas_view_generator(request, app_label, model_name):
    if '.'.join([app_label, model_name]) not in BULKABLE_MODELS:
        return HttpResponseForbidden()
    model = apps.get_model(app_label, model_name)  # needs whitelisting
    fieldnames = request.GET.getlist('fieldname')
    view = get_pandas_view_for_model(model, fieldnames=fieldnames).as_view()
return view(request)