'As admin role, create an image with protected property, and verify
unpermitted role \'fake_role\' can *not* update that protected property'

def test_prop_protection_with_update_and_unpermitted_role(self):

    image_id = self._create_admin_image({'x-image-meta-property-x_owner_foo': 'bar'})
    another_request = unit_test_utils.get_fake_request(path=('/images/%s' % image_id), method='PUT')
    headers = {'x-auth-token': 'user:tenant:fake_role', 'x-image-meta-property-x_owner_foo': 'baz'}
    for (k, v) in six.iteritems(headers):
        another_request.headers[k] = v
    output = another_request.get_response(self.api)
    self.assertEqual(webob.exc.HTTPForbidden.code, output.status_int)
    self.assertIn(("Property    '%s'    is    protected" % 'x_owner_foo'), output.body.decode())
