def METHOD_NAME(
    staff_api_client, app
):
    # given
    app_id = graphene.Node.to_global_id("App", app.pk)
    variables = {
        "id": app_id,
        "input": [{"key": PUBLIC_KEY, "value": "NewMetaValue"}],
    }
    # when
    response = staff_api_client.post_graphql(
        UPDATE_PUBLIC_METADATA_MUTATION % "App", variables, permissions=None
    )
    # then
    assert_no_permission(response)