'The endpoint should NOT be accessible if the request is not made by the submitter or staff user.'

def test_non_owner_or_staff_user(self):

    user = UserFactory()
    self.client.login(username=user.username, password=self.PASSWORD)
    response = self.client.get(self.path)
    self.assertEqual(response.status_code, 403)
