def METHOD_NAME(user_api_client, gift_card):
    # given
    gift_card.store_value_in_metadata({PUBLIC_KEY: PUBLIC_VALUE})
    gift_card.save(update_fields=["metadata"])
    variables = {"id": graphene.Node.to_global_id("GiftCard", gift_card.pk)}
    # when
    response = user_api_client.post_graphql(QUERY_GIFT_CARD_PUBLIC_META, variables)
    # then
    assert_no_permission(response)