Users can delete views even though they are not allowed

Using Django Forms & APIs
1

In my code, I have the following view:

class PointCountDetails(generics.RetrieveDestroyAPIView):
   serializer_class=PointCountSerializer
   permission_classes=[IsSuperUserOrSafeOnly]

The permission looks as follows:

изображение_2022-07-16_123505861

The problem is that when I surf API as non-admin user, the user is allowed to delete instance of pointcount that is attached to their id. Why is it that if permission doesn’t allow them to delete?

2

What are the values of each property used in all of the conditions? You can use a debugger or print them to the terminal.