actingAsForApi(User::factory()->create()) ->postJson(route('api.departments.store')) ->assertForbidden(); } }