def METHOD_NAME(client, world):
    world.trait_grants["admin"] = ["blafasel"]
    world.save()
    u1 = create_user(world_id="sample", client_id="1234")
    u2 = create_user(world_id="sample", token_id="5432")
    r = client.post(
        "/api/v1/worlds/sample/delete_user",
        {"user_id": str(u1.pk)},
        HTTP_AUTHORIZATION=get_token_header(world, ["noadmin"]),
    )
    assert r.status_code == 403
    world.trait_grants["admin"] = ["admin"]
    world.save()
    r = client.post(
        "/api/v1/worlds/sample/delete_user",
        {"user_id": str(u1.pk)},
        HTTP_AUTHORIZATION=get_token_header(world, ["foobartrait", "admin", "api"]),
    )
    assert r.status_code == 204
    u1.refresh_from_db()
    assert not u1.client_id
    r = client.post(
        "/api/v1/worlds/sample/delete_user",
        {"token_id": u2.token_id},
        HTTP_AUTHORIZATION=get_token_header(world, ["foobartrait", "admin", "api"]),
    )
    assert r.status_code == 204
    u1.refresh_from_db()
    assert not u1.token_id