#NEWLINE# def test_get_config_unauthorized( self ) : #NEWLINE# #INDENT# url = self . project . api_url_for ( '{0}_get_config' . format ( self . ADDON_SHORT_NAME ) ) #NEWLINE# user = AuthUserFactory ( ) #NEWLINE# self . project . add_contributor ( user , permissions = [ permissions . READ ] , auth = user . auth , save = True ) #NEWLINE# res = self . app . get ( url , auth = user . auth , expect_errors = True ) #NEWLINE# assert_equal ( res . status_code , http . FORBIDDEN )