It would be something similar to this: https://spark.laravel.com/docs/6.0/billing#constraining-access-to-plans
That doesn't totally cover your scenario, but shows you how you could do something similar where in middleware, you'd check the plan they were subscribed to and reject it if they are trying to do something not allowed for that plan.