- Changed permission_classes to get_permissions() method - Read operations (list, retrieve) now accessible to all authenticated users - Write operations (update, partial_update) still restricted to admins/owners - Fixes 403 Forbidden errors when loading module settings in sidebar