From 9e56d09bfaa54249661e8abffb48e92e1e2c1cd8 Mon Sep 17 00:00:00 2001
From: Daniel Gyulai <gydani4@hotmail.hu>
Date: Tue, 24 Nov 2020 19:14:53 +0100
Subject: [PATCH] Restrictions for case status change

---
 CoviDok/BLL/User/Managers/CaseManager.cs | 41 +++++++++++++++---------
 CoviDok/Controllers/CaseController.cs    |  8 +++++
 2 files changed, 33 insertions(+), 16 deletions(-)

diff --git a/CoviDok/BLL/User/Managers/CaseManager.cs b/CoviDok/BLL/User/Managers/CaseManager.cs
index 115e56a..4bc71f8 100644
--- a/CoviDok/BLL/User/Managers/CaseManager.cs
+++ b/CoviDok/BLL/User/Managers/CaseManager.cs
@@ -44,14 +44,19 @@ namespace CoviDok.BLL.User.Managers
             if (c == null) throw new KeyNotFoundException();
             if (handler.IsAuthorized(s.Id, c) && s.Type == Api.Role.Ast)
             {
-                Update update = new Update { 
-                CaseId = c.Id,
-                SenderId = s.Id,
-                SenderRole = s.Type,
-                CreatedDate = DateTime.Now,
-                Content = "Case set to 'Certified'"
-                };
-                await handler.SetCase(id, CaseStatus.Certified, update);
+                if (c.CaseStatus == CaseStatus.Cured)
+                {
+                    Update update = new Update
+                    {
+                        CaseId = c.Id,
+                        SenderId = s.Id,
+                        SenderRole = s.Type,
+                        CreatedDate = DateTime.Now,
+                        Content = "Case set to 'Certified'"
+                    };
+                    await handler.SetCase(id, CaseStatus.Certified, update);
+                }
+                else throw new InvalidOperationException();
             }
             else
             {
@@ -65,15 +70,19 @@ namespace CoviDok.BLL.User.Managers
             if (c == null) throw new KeyNotFoundException();
             if (s.Id == c.DoctorId)
             {
-                Update update = new Update
+                if (c.CaseStatus == CaseStatus.InProgress)
                 {
-                    CaseId = c.Id,
-                    SenderId = s.Id,
-                    SenderRole = s.Type,
-                    CreatedDate = DateTime.Now,
-                    Content = "Case set to 'Cured'"
-                };
-                await handler.SetCase(id, CaseStatus.Cured, update);
+                    Update update = new Update
+                    {
+                        CaseId = c.Id,
+                        SenderId = s.Id,
+                        SenderRole = s.Type,
+                        CreatedDate = DateTime.Now,
+                        Content = "Case set to 'Cured'"
+                    };
+                    await handler.SetCase(id, CaseStatus.Cured, update);
+                }
+                else throw new InvalidOperationException();
             }
             else
             {
diff --git a/CoviDok/Controllers/CaseController.cs b/CoviDok/Controllers/CaseController.cs
index f1fe32d..e7d5ac2 100644
--- a/CoviDok/Controllers/CaseController.cs
+++ b/CoviDok/Controllers/CaseController.cs
@@ -153,6 +153,10 @@ namespace CoviDok.Controllers
             {
                 return NotFound();
             }
+            catch (InvalidOperationException)
+            {
+                return BadRequest();
+            }
         }
         // POST /api/Case/{id}/close
         [HttpPost("{id}/cure")]
@@ -172,6 +176,10 @@ namespace CoviDok.Controllers
             {
                 return NotFound();
             }
+            catch (InvalidOperationException)
+            {
+                return BadRequest();
+            }
         }
 
         // POST /api/Case/filter