26 lines
1.6 KiB
Markdown
26 lines
1.6 KiB
Markdown
# Phase 5 — Administration authorization correction
|
|
|
|
This is a **delta package** against Phase 4, not a full project.
|
|
|
|
## What changed
|
|
- Updated the SonarDesk admin Gate to accept an explicitly granted Spatie `manage-sonardesk-licensing` permission (web guard) as well as the existing approved administrator roles.
|
|
- Added Pest authorization smoke tests for anonymous users, unprivileged verified users, and the explicit permission grant.
|
|
- Did not change any licensing API, checkout, webhook, or customer records.
|
|
|
|
## Install
|
|
1. Back up `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php`.
|
|
2. Copy the included `Modules/Licensing/Providers/IntegratedLicensingServiceProvider.php` over the existing file.
|
|
3. Copy the included test into `tests/Feature/` if desired.
|
|
4. Run `composer dump-autoload && php artisan optimize:clear && php artisan permission:cache-reset`.
|
|
5. Run `php artisan route:list --path=administration/sonardesk -v`.
|
|
6. Run `php artisan test --filter=SonarDeskAdminAuthorizationTest` against a **disposable test database**. Do not run destructive test migrations against live customer data.
|
|
|
|
## Next implementation milestones
|
|
- Phase 6: audited commerce checkout, webhook idempotency, customer identity mapping and data import.
|
|
- Phase 7: downloads, releases, appcast, system requirements, and ABSDev Stylist frontend.
|
|
- Phase 8: complete route parity, automated regression tests, staging deployment and cutover.
|
|
|
|
## Limitations
|
|
- The tests have not been run against your local ABSDev database.
|
|
- No production-readiness claim is made; commerce/customer migration is still pending.
|