Language: Python
Label: safe
CWE: CWE-306 \u2014 Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Code:
    def test_get_file_without_permission(self):
        for url in self.urls:
            with self.subTest(url):
                response = self.client.get(url)
                self.assertHttpStatus(response, 403)