'Tests update of an active certificate without global staff permission on course.'

@ddt.data(C4X_SIGNATORY_PATH, SIGNATORY_PATH)
def test_update_active_certificate_without_global_staff_permissions(self, signatory_path):

    self._add_course_certificates(count=2, signatory_count=1, is_active=True, asset_path_format=signatory_path)
    cert_data = {u'id': 1, u'version': CERTIFICATE_SCHEMA_VERSION, u'name': u'New    test    certificate', u'description': u'New    test    description', u'course_title': u'Course    Title    Override', u'org_logo_path': '', u'is_active': False, u'signatories': []}
    user = UserFactory()
    for role in [CourseInstructorRole, CourseStaffRole]:
        role(self.course.id).add_users(user)
    self.client.login(username=user.username, password='test')
    response = self.client.put(self._url(cid=1), data=json.dumps(cert_data), content_type='application/json', HTTP_ACCEPT='application/json', HTTP_X_REQUESTED_WITH='XMLHttpRequest')
    self.assertEqual(response.status_code, 403)
