def METHOD_NAME(self, web_frontend, test_client):
    response = test_client.get('/upload', headers={'Authorization': guest.key}, follow_redirects=True)
    assert self.PERMISSION_DENIED_STRING in response.data, 'upload should not be accessible for guest'
    response = test_client.get('/upload', headers={'Authorization': guest_analyst.key}, follow_redirects=True)
    assert self.PERMISSION_DENIED_STRING in response.data, 'upload should not be accessible for guest_analyst'
    response = test_client.get('/upload', headers={'Authorization': superuser.key}, follow_redirects=True)
    assert self.PERMISSION_DENIED_STRING not in response.data, 'upload should be accessible for superusers'