How come I can set these fields with Postman even though my perform_create method is setting these fields at save with the requested user?

Question

Here is my serializer

class ItemSerializer(serializers.ModelSerializer):
    class Meta:
        model = Item
        fields = \'__all__\'

My