def METHOD_NAME(user_api_client, app):
    # given
    variables = {"id": graphene.Node.to_global_id("App", app.pk)}
    # when
    response = user_api_client.post_graphql(QUERY_APP_PUBLIC_META, variables)
    # then
    assert_no_permission(response)