feat: enforce api permissions

backend/apps/solutions/tests/test_solution_api.py

@@ -1,8 +1,8 @@
 from apps.tickets.models import Ticket
 
 
-def test_create_and_list_solution(client, db):
-    response = client.post(
+def test_create_and_list_solution(admin_client, db):
+    response = admin_client.post(
         "/api/solutions",
         data={
             "title": "Restart callback worker",
@@ -17,20 +17,20 @@ def test_create_and_list_solution(client, db):
     assert response.status_code == 200
     solution_id = response.json()["id"]
 
-    response = client.get("/api/solutions")
+    response = admin_client.get("/api/solutions")
     assert response.status_code == 200
     assert response.json()[0]["id"] == solution_id
 
 
-def test_link_solution_to_ticket_increments_usage(client, db):
+def test_link_solution_to_ticket_increments_usage(admin_client, db):
     ticket = Ticket.objects.create(ticket_no="TK202606300020", title="A", description="A")
-    solution = client.post(
+    solution = admin_client.post(
         "/api/solutions",
         data={"title": "S", "problem_signature": "P", "root_cause": "R", "solution": "Do S"},
         content_type="application/json",
     ).json()
 
-    response = client.post(
+    response = admin_client.post(
         f"/api/solutions/{solution['id']}/link-ticket",
         data={"ticket_id": ticket.id, "link_type": "adopted"},
         content_type="application/json",