How do I set up djoser permissions so that it doesn’t try to provide data for anonymous users?

I try set up Djoser like this:

DJOSER = {
    "LOGIN_FIELD": "email",
    "HIDE_USERS": False,
    "TOKEN_MODEL": "rest_framework.authtoken.models.Token",
    "SERIALIZERS": {
        "user": "users.serializers.UserSerializer",
        "current_user": "users.serializers.UserSerializer",
        "user_create": "users.serializers.UserCreateSerializer",
    },
    "PERMISSIONS": {
        "user": ["rest_framework.permissions.IsAuthenticatedOrReadOnly"],
        "current_user": ["djoser.permissions.CurrentUserOrAdmin"],
        "user_list": ["rest_framework.permissions.IsAuthenticatedOrReadOnly"],
    },}

but it doesn’t work