def METHOD_NAME(apiclient, user, question, question_ct):
    url = reverse(
        "ratings-list",
        kwargs={"content_type": question_ct.pk, "object_pk": question.pk},
    )
    apiclient.force_authenticate(user=user)
    response = apiclient.get(url, format="json")
    assert response.status_code == status.HTTP_403_FORBIDDEN