fix: align permission navigation and page access

apps/admin/src/auth/permission-tabs.integration.test.ts

@@ -0,0 +1,19 @@
+import { describe, expect, it } from 'vitest';
+import { filterTabsByPermission } from './permission-tabs';
+
+describe('permission-aware tabs', () => {
+  const tabs = [
+    { key: 'all', requiredPermission: 'deposit:view' },
+    { key: 'pending', requiredPermission: 'deposit:approve' },
+  ];
+
+  it('hides tabs whose backing API permission is missing', () => {
+    expect(filterTabsByPermission(tabs, ['deposit:view']).map((tab) => tab.key)).toEqual(['all']);
+  });
+
+  it('shows a privileged tab only when its permission is present', () => {
+    expect(
+      filterTabsByPermission(tabs, ['deposit:view', 'deposit:approve']).map((tab) => tab.key),
+    ).toEqual(['all', 'pending']);
+  });
+});