it('should able to revoke permission', async () => {
      const revoked = await rbac.revokeByName('user', 'create_article');
      expect(revoked).toBe(true);
    });