could you throw some additional basic tests in test_views, using a curator and not an app publisher, trying various requests? It's redundant with the tests in test_authorization, but I think it would be nice to have a few here as well (we already have similar redundancy since we have some tests checking that we return `PermissionDenied` if user is not authenticated in test_views)