docs: def has_permission(self, request, view):
          """ applies to social-link-list """
          if request.method == 'POST':
              user = Profile.objects.only('id', 'username').get(username=view.kwargs['username'])
              return request.user.id == user.id
  
          return True