code: def filter_queryset(self, request, queryset, view):
          
          if request.user.is_superuser:
              return queryset
          return queryset.filter(status__user=request.user)
docs: Filter out any artifacts which the requesting user does not have permission to view.