'Users should only be able to list their own data.'

def test_list_permissions(self):

    url = reverse('api_experiments:v0:data-list')
    user = UserFactory()
    response = self.client.get(url)
    self.assertEqual(response.status_code, 401)
    ExperimentDataFactory()
    datum = ExperimentDataFactory(user=user)
    self.client.login(username=user.username, password=UserFactory._DEFAULT_PASSWORD)
    response = self.client.get(url)
    self.assertEqual(response.status_code, 200)
    self.assertEqual(response.data['results'], ExperimentDataSerializer([datum], many=True).data)
