GET /api/v1/firms/?format=api
HTTP 403 Forbidden Allow: GET, POST, HEAD, OPTIONS Content-Type: application/json Vary: Accept { "detail": "You do not have permission to perform this action." }