def METHOD_NAME(
    send_fulfillment_update_mock,
    staff_api_client,
    fulfillment,
    permission_group_all_perms_channel_USD_only,
    channel_PLN,
):
    # given
    query = FULFILLMENT_UPDATE_TRACKING_QUERY
    permission_group_all_perms_channel_USD_only.user_set.add(staff_api_client.user)
    order = fulfillment.order
    order.channel = channel_PLN
    order.save(update_fields=["channel"])
    fulfillment_id = graphene.Node.to_global_id("Fulfillment", fulfillment.id)
    tracking = "stationary tracking"
    variables = {"id": fulfillment_id, "tracking": tracking}
    # when
    response = staff_api_client.post_graphql(query, variables)
    # then
    assert_no_permission(response)