meta {
  name: Regenerate Device Token - Forbidden
  type: http
  seq: 3
}

put {
  url: {{base_url}}/api/devices/{{other_device_id}}/regenerate-token
  body: none
  auth: inherit
}

docs {
  ## Regenerate Device Token - Forbidden

  Tests that users cannot regenerate tokens for devices belonging to other users.

  **Expected Behavior:** Returns 403 Forbidden when trying to regenerate token for another user's device

  **Status Codes:**
  - 403: Forbidden (device belongs to different user)

  **Use Case:** Verify authorization - users can only manage their own devices

  **Setup:** Use Bearer token from user A, try to regenerate token for user B's device
}