有几个错误，主要是在你看来.我做了以下几点：
models.py

from django.db import models
from django.contrib.auth import get_user_model

class Product(models.Model):
    user = models.ForeignKey(get_user_model(), on_delete=models.CASCADE, default=1)
    name = models.CharField(max_length=100, null=True, blank=True)
    imgUrl = models.TextField(default='')
    selling_price = models.FloatField(null=True, blank=True)
    actual_price = models.FloatField(null=True, blank=True)
    quantity = models.IntegerField()

    class Meta:
        db_table = 'product'

serializers.py：移除'get_profit'字段或实作序列化程式方法字段

from rest_framework import serializers
from core.models import Product

class ProductSerializer(serializers.ModelSerializer):
    class Meta:
        model = Product
        fields = ['id', 'user', 'name', 'imgUrl', 'selling_price', 'actual_price', 'quantity']

views.py：若要依使用者筛选，请使用authentication_classes和permission_classes，确保使用者已通过验证且具有验证权限。请使用filter_queryset拦截，依使用者筛选您的查询集。

from rest_framework.authentication import SessionAuthentication, BasicAuthentication
from rest_framework.permissions import IsAuthenticated
from rest_framework import generics
from core.api.serializers import ProductSerializer
from core.models import Product

class ProductCreateList(generics.ListCreateAPIView):
    authentication_classes = [SessionAuthentication, BasicAuthentication]  
    permission_classes = [IsAuthenticated]

    serializer_class = ProductSerializer
    queryset = Product.objects.all()

    def filter_queryset(self, queryset):
        queryset = queryset.filter(user=self.request.user)
        return super().filter_queryset(queryset)