'Non-staff users should not be allowed to access the endpoint.'

def test_bulk_upsert_permissions(self):

    data = []
    url = reverse('api_experiments:v0:key_value-bulk-upsert')
    user = UserFactory(is_staff=False)
    response = self.client.put(url, data, format='json')
    self.assertEqual(response.status_code, 401)
    self.client.login(username=user.username, password=UserFactory._DEFAULT_PASSWORD)
    response = self.client.put(url, data, format='json')
    self.assertEqual(response.status_code, 403)
