'Client requires an approval from a member of "legal_approval".'

def testClientApprovalSingleLabel(self):

    self.assertRaises(grr_api_errors.AccessForbiddenError, self.api.Client(self.client_legal_id).File('fs/os/foo').Get)
    self.RequestAndGrantClientApproval(self.client_legal, self.token)
    self.assertRaises(grr_api_errors.AccessForbiddenError, self.api.Client(self.client_legal_id).File('fs/os/foo').Get)
    self.GrantClientApproval(self.client_legal, self.token.username, reason=self.token.reason, approver='legal1')
    self.api.Client(self.client_legal_id).File('fs/os/foo').Get()
