feat: enforce api permissions

backend/tests/conftest.py

@@ -1 +1,13 @@
+import pytest
+from django.contrib.auth import get_user_model
 
+
+@pytest.fixture
+def admin_client(client, db):
+    user = get_user_model().objects.create_superuser(
+        username="admin-test",
+        email="admin-test@example.com",
+        password="admin-test-password",
+    )
+    client.force_login(user)
+    return client