def test_dc_can_only_access_users_from_his_category(self): other_category = CategoryFactory() user = UserFactory(name='dc2', password='******', category=other_category) user.user_permissions = self.dc_perms user.save() self.client.login(username=user.email, password='******') res = self.client.get(self.url) self.assertEqual(res.status_code, 403)