_ignore_model_permissions is ignoring users authentication too

[dennybiasiolli]

Partially referring to this issue: #8425

In permssions.py, the DjangoModelPermissions.has_permission function actually is

    def has_permission(self, request, view):
        # Workaround to ensure DjangoModelPermissions are not applied
        # to the root view when using DefaultRouter.
        if getattr(view, '_ignore_model_permissions', False):
            return True

        if not request.user or (
           not request.user.is_authenticated and self.authenticated_users_only):
            return False

        queryset = self._queryset(view)
        perms = self.get_required_permissions(request.method, queryset.model)

        return request.user.has_perms(perms)

In my opinion it should be

    def has_permission(self, request, view):
        if not request.user or (
           not request.user.is_authenticated and self.authenticated_users_only):
            return False

        # Workaround to ensure DjangoModelPermissions are not applied
        # to the root view when using DefaultRouter.
        if getattr(view, '_ignore_model_permissions', False):
            return True

        queryset = self._queryset(view)
        perms = self.get_required_permissions(request.method, queryset.model)

        return request.user.has_perms(perms)

So checking for authentication before checking for the _ignore_model_permissions flag.

What do you think about that?
I'm happy to provinde a PR and tests for fixing this if needed 😉

[auvipy]

c0d95cb