Mixin for the Djando Rest Framework (DFR) to filter objects by authenticated user.

gistfile1.py

class AuthenticatedUserResourceMixin(ResourceMixin):

    permissions = (IsAuthenticated,)

    def build_query(self, *args, **kwargs):
        tmp = dict(kwargs)

        if BaseRenderer._FORMAT_QUERY_PARAM in tmp:
            del tmp[BaseRenderer._FORMAT_QUERY_PARAM]

        if args:
            tmp.update({'pk': args[-1]})
        
        # Return objects from authenticated users only.
        user = self.request.user if self.request.user.is_authenticated() else 0
        tmp.update({'user':user})
        
        return Q(**tmp)

class InstanceUserMessageView(AuthenticatedUserResourceMixin, InstanceModelView):
    resource = UserMessageResource