create(); $this->actingAsForApi(User::factory()->create()) ->getJson(route('api.accessories.show', $accessory)) ->assertForbidden(); } }