def METHOD_NAME(client, jwt, session, keycloak_mock):  # pylint:disable=unused-argument
    """Assert that an org can be POSTed."""
    headers = factory_auth_header(jwt=jwt, claims=TestJwtClaims.public_user_role)
    rv = client.post('/api/v1/users', headers=headers, content_type='application/json')
    rv = client.post('/api/v1/orgs', data=json.dumps(TestOrgInfo.org1),
                     headers=headers, content_type='application/json')
    assert rv.status_code == http_status.HTTP_201_CREATED
    orgs = json.loads(rv.data)
    id = orgs.get('id')
    rv = client.get(f'/api/v1/orgs/{id}/authorizations',
                    headers=headers, content_type='application/json')
    assert rv.status_code == http_status.HTTP_200_OK
    org_authorisations = json.loads(rv.data)
    assert org_authorisations.get('orgMembership') == 'ADMIN'
    assert org_authorisations.get('roles')
    # NR should have all access since its internal
    headers.update({'Product-Code': 'NRO'})
    rv = client.get(f'/api/v1/orgs/{id}/authorizations',
                    headers=headers, content_type='application/json')
    assert rv.status_code == http_status.HTTP_200_OK
    org_authorisations_by_nro = json.loads(rv.data)
    assert org_authorisations_by_nro.get('orgMembership') == 'ADMIN', 'NR should get admin access'
    assert org_authorisations_by_nro.get('roles')
    # vital stats shouldn't get any access since its partner
    headers.update({'Product-Code': 'VS'})
    rv = client.get(f'/api/v1/orgs/{id}/authorizations',
                    headers=headers, content_type='application/json')
    assert rv.status_code == http_status.HTTP_200_OK
    org_authorisations_by_vs = json.loads(rv.data)
    assert len(org_authorisations_by_vs.get('roles')) == 0