def METHOD_NAME(staff_api_client, app_with_token):
    query = APP_TOKEN_DELETE_MUTATION
    token = app_with_token.tokens.get()
    id = graphene.Node.to_global_id("AppToken", token.id)
    variables = {"id": id}
    response = staff_api_client.post_graphql(query, variables=variables)
    assert_no_permission(response)
    token.refresh_from_db()