checkedOutToUser()->create(); $this->actingAsForApi(User::factory()->create()) ->postJson(route('api.accessories.checkin', $accessory)) ->assertForbidden(); } }