actingAsForApi(User::factory()->create()) ->getJson(route('api.departments.index')) ->assertForbidden(); } }