django-rules permissions not propagating as expected through Django REST Framework

Question

I am trying to set up some basic authorization in my test app contact in a Django project using django-rules.

There are two models, contact