def METHOD_NAME(app, db, users, create_schema, cli_runner):
    user = users['cms_user']
    add_role_to_user(user, 'test-users@cern.ch')
    _schema = create_schema('test-schema')
    db.session.add(_schema)
    db.session.commit()
    schema_id = _schema.id
    res = cli_runner('fixtures permissions -p read -r test-users@cern.ch --deny test-schema')
    assert res.exit_code == 0
    assert 'Process finished.' in res.output
    action_roles = ActionRoles.query.filter_by(argument=str(schema_id)).all()
    role = Role.query.filter_by(name='test-users@cern.ch').one()
    assert len(action_roles) == 1
    assert action_roles[0].exclude is True
    assert action_roles[0].action == 'deposit-schema-read'
    assert action_roles[0].role_id == role.id