def METHOD_NAME(self):
    rat = self._create_repo_api_token_obj()
    data = 'permission=rw'
    self.logout()
    self.login_as(self.admin)
    resp = self.client.put(self.user_url, data, 'application/x-www-form-urlencoded')
    self.assertEqual(403, resp.status_code)