Add django api permissions tests