#NEWLINE# def test_restricted_config_contrib_not_owner( self ) : #NEWLINE# #INDENT# self . contrib . add_addon ( 'box' ) #NEWLINE# self . contrib . save ( ) #NEWLINE# url = api_url_for ( 'box_set_config' , pid = self . project . _primary_key ) #NEWLINE# res = self . app . put_json ( url , { #NEWLINE# #INDENT# 'selected' : { #NEWLINE# #INDENT# 'path' : 'foo' , #NEWLINE# #UNINDENT# } , #NEWLINE# #UNINDENT# } , auth = self . contrib . auth , expect_errors = True ) #NEWLINE# assert_equal ( res . status_code , httplib . FORBIDDEN )