add a test for the expected response of a schema protected with admin permissions

Author: ghazi-git

tests/test_openapi.py

@@ -630,6 +630,11 @@ def test_schema_generated(api_client):
     assert response.status_code == 200
 
 
+def test_protected_schema_response(api_client):
+    response = api_client.get("/protected-schema/")
+    assert response.status_code == 403
+
+
 @extend_schema_serializer(
     examples=[
         OpenApiExample(

tests/urls.py

@@ -1,5 +1,6 @@
 from django.urls import path
 from drf_spectacular.views import SpectacularAPIView
+from rest_framework.permissions import IsAdminUser
 
 from .views import (
     AuthErrorView,
@@ -18,4 +19,8 @@
     path("rate-limit-error/", RateLimitErrorView.as_view()),
     path("recursion-error/", RecursionView.as_view()),
     path("schema/", SpectacularAPIView.as_view(), name="api-schema"),
+    path(
+        "protected-schema/",
+        SpectacularAPIView.as_view(permission_classes=[IsAdminUser]),
+    ),
 ]