def METHOD_NAME(self, data):
    """
    Ensure access to these APIs is restricted to those with explicit model
    permissions.
    """
    self.client.force_authenticate(user=UserFactory())
    response = self.client.get(self.list_path, data)
    self.assertEqual(response.status_code, 403)