def METHOD_NAME(self):
    """Ensure creations and deletions and not allowed."""
    user = create_maintainer()
    user.is_superuser = True
    user.save()
    self.client.force_authenticate(user=user)
    resp = self.client.post(self.api_url(user.id), {'email': 'foo@f.com'})
    self.assertEqual(status.HTTP_405_METHOD_NOT_ALLOWED, resp.status_code)
    resp = self.client.delete(self.api_url(user.id))
    self.assertEqual(status.HTTP_405_METHOD_NOT_ALLOWED, resp.status_code)