public async Task HandleAsync_NoInternalAccess_ThrowsSecurityException()
        {
            var authorization = new AuthorizationBuilder().DenyInternalAreaAccess().Build();

            handler = new GetAatfsByOrganisationIdHandler(authorization, aatfmap, dataAccess);

            Func <Task> action = async() => await handler.HandleAsync(A.Dummy <GetAatfsByOrganisationId>());

            await action.Should().ThrowAsync <SecurityException>();
        }
        public async Task HandleAsync_GivenRequest_GetAatfsShouldBeCalled()
        {
            var result = await handler.HandleAsync(A.Dummy <GetAatfsByOrganisationId>());

            A.CallTo(() => dataAccess.GetAatfs()).MustHaveHappened(Repeated.Exactly.Once);
        }