actingAsForApi(User::factory()->create()) ->postJson(route('api.accessories.store')) ->assertForbidden(); } }