actingAsForApi(User::factory()->create()) ->postJson(route('api.assets.store')) ->assertForbidden(); } }