def METHOD_NAME(self):
    """Ensure creates, updates and deletes aren't allowed"""
    user = create_maintainer()
    user.is_superuser = True
    user.save()
    self.client.force_authenticate(user=user)
    resp = self.client.post(self.api_url(), {'name': 'Test'})
    self.assertEqual(status.HTTP_405_METHOD_NOT_ALLOWED, resp.status_code)
    series = create_series()
    resp = self.client.patch(self.api_url(series.id), {'name': 'Test'})
    self.assertEqual(status.HTTP_405_METHOD_NOT_ALLOWED, resp.status_code)
    resp = self.client.delete(self.api_url(series.id))
    self.assertEqual(status.HTTP_405_METHOD_NOT_ALLOWED, resp.status_code)