def test_other_user(self):
        TestUsers.new_user(username='user2', password='user2')
        self.client.login(username='user2', password='user2')

        response = self.get_response(self.user.id, params=self.params)
        self.assertPermissionDenied(response)

        user = User.objects.get(id=self.user.id)
        self.assertEqual(user.first_name, 'Test')
        self.assertEqual(user.last_name, 'User')
Another user should not be able to change information about any other user.
dataset/ETHPy150Open bmun/huxley/huxley/api/tests/test_user.py/UserDetailPatchTestCase.test_other_user