move into sonardesk

tests/Feature/SonarDeskAdminAuthorizationTest.php

@@ -0,0 +1,24 @@
+<?php
+
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Spatie\Permission\Models\Permission;
+
+uses(RefreshDatabase::class);
+
+it('redirects guests away from SonarDesk administration', function (): void {
+    $this->get('/administration/sonardesk')->assertRedirect();
+});
+
+it('denies an authenticated verified user without licensing permission', function (): void {
+    $user = User::factory()->create(['email_verified_at' => now()]);
+    $this->actingAs($user)->get('/administration/sonardesk')->assertForbidden();
+});
+
+it('allows a verified user granted the licensing permission past authorization', function (): void {
+    Permission::findOrCreate('manage-sonardesk-licensing', 'web');
+    $user = User::factory()->create(['email_verified_at' => now()]);
+    $user->givePermissionTo('manage-sonardesk-licensing');
+    expect($user->can('manage-sonardesk-licensing'))->toBeTrue();
+    // Full dashboard request requires licensing migrations and database fixtures.
+});