'Test that an authenticated staff cannot POST to another user\'s upload
endpoint.'

def test_upload_staff(self, mock_log):

    staff_user = UserFactory(is_staff=True, password=TEST_PASSWORD)
    self.reset_tracker()
    staff_client = APIClient()
    staff_client.login(username=staff_user.username, password=TEST_PASSWORD)
    with make_image_file() as image_file:
        response = staff_client.post(self.url, {'file': image_file}, format='multipart')
        self.check_response(response, 403)
        self.check_images(False)
        self.check_has_profile_image(False)
    self.assertFalse(mock_log.info.called)
    self.assert_no_events_were_emitted()
