code: def get_object(self, queryset=None):
          
          try:
              pk = self.kwargs.get('pk', None)
  
              # allow serializer without service
              obj = self.service.get(pk)
              return obj
          except self.model.DoesNotExist:
              raise Http404()
docs: Override default to add support for object-level permissions.