@@ -0,0 +1,723 @@
+class AuthorizedTest:%0A%0A    async def test_not_authorized(self, do_get):%0A        resp = await do_get(%22/api/users%22)%0A%0A        assert resp.status == 403%0A%0A        assert await resp.json() == %7B%0A            %22message%22: %22Not authorized%22%0A        %7D%0A%0A%0Aclass ProtectedTest(AuthorizedTest):%0A%0A    async def test_not_authorized(self, do_get):%0A        resp = await do_get(%22/api/users%22)%0A%0A        assert resp.status == 403%0A%0A        assert await resp.json() == %7B%0A            %22message%22: %22Not authorized%22%0A        %7D%0A%0A    async def test_not_permitted(self, do_get):%0A        resp = await do_get(%22/api/users%22, authorize=True)%0A%0A        assert resp.status == 403%0A%0A        assert await resp.json() == %7B%0A            %22message%22: %22Not permitted%22%0A        %7D%0A

Add test superclasses for authorization and permissions