def METHOD_NAME(self):
    self.app_post_json(self._prefix, {}, status=403)
    headers = self.add_authorization_header(username='contributor')
    self.app_post_json(self._prefix, {}, headers=headers, status=403)