member cannot access admin settings

1const user = sharedFixtures.member;23test('member cannot access admin settings', async () => {4  const response = await api.get('/admin/settings', { user });5  expect(response.status).toBe(403);6});78test('admin can update settings', async () => {9  user.role = 'admin';10  await api.put('/admin/settings', { user, theme: 'dark' });11});

AssertionError: expected 200 to equal 403
  at tests/auth/permissions.spec.ts:5:27
Metadata: previous test = "admin can update settings"