Issue #3610464: Add test coverage for the orders-overview and order-entity access policies

Adds discriminating kernel tests for OrderOverviewAccess (admin / tenant order manager allowed, unprivileged denied) and OrderAccessControlHandler (view/update scoped to managers; delete guard: archived-or-cancelled and same-tenant only, applied to everyone). See #3610464.

Merge request reports

Loading