[MM-58840] Add routing restrictions (#27482)

e2e-tests/cypress/tests/integration/channels/enterprise/system_console/group_configuration_spec.js

@@ -55,6 +55,14 @@ describe('group configuration', () => {
         });
     });
 
+    it("MM-58840 Groups - can't navigate to invalid URL", () => {
+        // # Visit the invalid URL.
+        cy.visit('/admin_console/user_management/groups/invalid');
+
+        // * Verify that the user is seeing the listing (subroute not matched)
+        cy.findByText('AD/LDAP Groups').should('be.visible');
+    });
+
     describe('adding a team', () => {
         it('does not add a team without saving', () => {
             addGroupSyncable('team', () => {

e2e-tests/cypress/tests/integration/channels/enterprise/system_console/team_members_spec.js

@@ -41,6 +41,14 @@ describe('Team members test', () => {
         });
     });
 
+    it("MM-58840 Teams - can't navigate to invalid URL", () => {
+        // # Visit the invalid URL.
+        cy.visit('/admin_console/user_management/teams/invalid');
+
+        // * Verify that the user is seeing the listing (subroute not matched)
+        cy.findByText('Mattermost Teams').should('be.visible');
+    });
+
     it('MM-23938 - Team members block is only visible when team is not group synced', () => {
         // # Visit the team page
         cy.visit(`/admin_console/user_management/teams/${testTeam.id}`);

e2e-tests/cypress/tests/integration/channels/system_console/user_management_spec.js

@@ -222,6 +222,17 @@ describe('User Management', () => {
         cy.url().should('contain', '/login');
     });
 
+    it("MM-58840 Users - can't navigate to invalid URL", () => {
+        // # Login as sysadmin.
+        cy.apiLogin(sysadmin);
+
+        // # Visit the invalid URL.
+        cy.visit('/admin_console/user_management/user/invalid');
+
+        // * Verify that the user is redirected to the default page.
+        cy.url().should('include', '/admin_console/about/license');
+    });
+
     function resetUserEmail(oldEmail, newEmail, errorMsg) {
         cy.visit('/admin_console/user_management/users');