# Phase 5 — Administration authorization correction

This is a **delta package** against Phase 4, not a full project.

## What changed
- Updated the SonarDesk admin Gate to accept an explicitly granted Spatie `manage-sonardesk-licensing` permission (web guard) as well as the existing approved administrator roles.
- Added Pest authorization smoke tests for anonymous users, unprivileged verified users, and the explicit permission grant.
- Did not change any licensing API, checkout, webhook, or customer records.

## Install
1. Back up `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php`.
2. Copy the included `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php` over the existing file.
3. Copy the included test into `tests/Feature/` if desired.
4. Run `composer dump-autoload && php artisan optimize:clear && php artisan permission:cache-reset`.
5. Run `php artisan route:list --path=administration/sonardesk -v`.
6. Run `php artisan test --filter=SonarDeskAdminAuthorizationTest` against a **disposable test database**. Do not run destructive test migrations against live customer data.

## Next implementation milestones
- Phase 6: audited commerce checkout, webhook idempotency, customer identity mapping and data import.
- Phase 7: downloads, releases, appcast, system requirements, and ABSDev Stylist frontend.
- Phase 8: complete route parity, automated regression tests, staging deployment and cutover.

## Limitations
- The tests have not been run against your local ABSDev database.
- No production-readiness claim is made; commerce/customer migration is still pending.