当Django Rest框架中没有使用特定的过滤器时，如何防止非员工访问`List`视图操作？

from rest_framework.permissions import BasePermission

class IsEmployee(BasePermission):
    def has_permission(self, request, view):
        # 在这里进行权限判断逻辑
        # 如果用户是员工，返回True；否则返回False
        return request.user.is_employee

from rest_framework.views import APIView
from rest_framework.response import Response

class EmployeeListView(APIView):
    permission_classes = [IsEmployee]

    def get(self, request):
        # 处理GET请求的逻辑
        return Response("List view for employees only")