def METHOD_NAME(self):
    """
    Ensures that the user gets their bookmarks back when they request them
    and that they only get *theirs*.
    """
    bookmark, _ = Bookmark.objects.get_or_create(
        **self.base_data(self.user, model_data=True)
    )
    other_users_bookmark, _ = Bookmark.objects.get_or_create(
        **self.base_data(self.user2, model_data=True)
    )
    response = self.client.get("/api/bookmarks/bookmarks/")
    self.assertEqual(response.status_code, HTTP_200_OK)
    # Make sure there actually are more than just what we're getting back
    # so we're sure the permissions are applied as expected
    users_bookmarks = Bookmark.objects.filter(user=self.user)
    self.assertGreater(len(Bookmark.objects.all()), len(users_bookmarks))
    for bookmark_entry in response.data:
        # We're going to filter the users_bookmarks QuerySet over and over
        # to be sure that everything we get from the API exists there which
        # means that we're only getting the bookmarks from the logged in user
        users_bookmarks_clone = users_bookmarks
        self.assertEqual(
            # Try to filter down self.user's bookmarks to those which include
            # user's id - which means bookmark_entry is owned by user
            len(users_bookmarks_clone.filter(pk=bookmark_entry["id"])),
            1,
        )