[Ci::EnqueueJobService](https://gitlab.com/gitlab-org/gitlab/-/blob/4d618abe7a9ca25cfec963e8384bc591a4dd0bc9/app/services/ci/enqueue_job_service.rb) is a central point for starting manual jobs for features like [protected environments](https://docs.gitlab.com/ci/environments/protected_environments/#deployment-only-access-to-protected-environments), but it doesn't have good test coverage as it was shown in https://gitlab.com/gitlab-com/gl-infra/production/-/issues/19377/ ## Proposal Add [defense in depth](https://gitlab.com/gitlab-org/gitlab/-/blob/4d618abe7a9ca25cfec963e8384bc591a4dd0bc9/doc/development/permissions/authorizations.md#L10-12) to this service and a test case that covers the permissions for the protected environments.