Nitpick: it would be nicer to define an `assert_user_has_access(user, role)` function, and then use that, rather than using `assertTrue`. It will make the tests a bit more readable, and you can get more informative error messages.