Testing Django model permissions settings