def get_queryset(self):
return self.queryset.all().accessible_to(user=self.request.user)<EOL>
Returns only objects which are accessible to the current user.
If user is not authenticated all public objects will be returned.

Model must implement AccessLevelManager!