Auditors can see project security dashboard

Aw yeah

ee/app/policies/ee/project_policy.rb

@@ -188,6 +188,7 @@ module EE
         enable :read_environment
         enable :read_deployment
         enable :read_pages
+        enable :read_project_security_dashboard
       end
 
       rule { auditor & ~guest }.policy do

ee/spec/policies/project_policy_spec.rb

@@ -39,6 +39,7 @@ describe ProjectPolicy do
         read_pipeline read_build read_commit_status read_container_image
         read_environment read_deployment read_merge_request read_pages
         create_merge_request_in award_emoji
+        read_project_security_dashboard
         read_vulnerability_feedback read_software_license_policy
       ]
     end
@@ -54,6 +55,10 @@ describe ProjectPolicy do
     context 'auditor' do
       let(:current_user) { create(:user, :auditor) }
 
+      before do
+        stub_licensed_features(security_dashboard: true, license_management: true)
+      end
+
       context 'who is not a team member' do
         it do
           is_expected.to be_disallowed(*developer_permissions)