def test_login_with_wrong_permission(self):
        api_key_without_permissions, _ = HQApiKey.objects.get_or_create(
            user=WebUser.get_django_user(self.user_without_permission)
        )
        self.assertAuthenticationFail(self.require_edit_data,
                                      self._get_request(
                                          domain=self.domain,
                                          HTTP_AUTHORIZATION=self._construct_api_auth_header(
                                              self.user_without_permission.username,
                                              api_key_without_permissions
                                          )
                                      ))