def METHOD_NAME(self):
    """api respects permission to search users"""
    response = self.client.get(self.api_link)
    self.assertEqual(response.status_code, 200)
    self.assertNotIn("users", [p["id"] for p in response.json()])