Restrictions for case status change

CoviDok/BLL/User/Managers/CaseManager.cs

@@ -44,14 +44,19 @@ namespace CoviDok.BLL.User.Managers
             if (c == null) throw new KeyNotFoundException();
             if (handler.IsAuthorized(s.Id, c) && s.Type == Api.Role.Ast)
             {
-                Update update = new Update { 
-                CaseId = c.Id,
-                SenderId = s.Id,
-                SenderRole = s.Type,
-                CreatedDate = DateTime.Now,
-                Content = "Case set to 'Certified'"
-                };
-                await handler.SetCase(id, CaseStatus.Certified, update);
+                if (c.CaseStatus == CaseStatus.Cured)
+                {
+                    Update update = new Update
+                    {
+                        CaseId = c.Id,
+                        SenderId = s.Id,
+                        SenderRole = s.Type,
+                        CreatedDate = DateTime.Now,
+                        Content = "Case set to 'Certified'"
+                    };
+                    await handler.SetCase(id, CaseStatus.Certified, update);
+                }
+                else throw new InvalidOperationException();
             }
             else
             {
@@ -65,15 +70,19 @@ namespace CoviDok.BLL.User.Managers
             if (c == null) throw new KeyNotFoundException();
             if (s.Id == c.DoctorId)
             {
-                Update update = new Update
+                if (c.CaseStatus == CaseStatus.InProgress)
                 {
-                    CaseId = c.Id,
-                    SenderId = s.Id,
-                    SenderRole = s.Type,
-                    CreatedDate = DateTime.Now,
-                    Content = "Case set to 'Cured'"
-                };
-                await handler.SetCase(id, CaseStatus.Cured, update);
+                    Update update = new Update
+                    {
+                        CaseId = c.Id,
+                        SenderId = s.Id,
+                        SenderRole = s.Type,
+                        CreatedDate = DateTime.Now,
+                        Content = "Case set to 'Cured'"
+                    };
+                    await handler.SetCase(id, CaseStatus.Cured, update);
+                }
+                else throw new InvalidOperationException();
             }
             else
             {

CoviDok/Controllers/CaseController.cs

@@ -153,6 +153,10 @@ namespace CoviDok.Controllers
             {
                 return NotFound();
             }
+            catch (InvalidOperationException)
+            {
+                return BadRequest();
+            }
         }
         // POST /api/Case/{id}/close
         [HttpPost("{id}/cure")]
@@ -172,6 +176,10 @@ namespace CoviDok.Controllers
             {
                 return NotFound();
             }
+            catch (InvalidOperationException)
+            {
+                return BadRequest();
+            }
         }
 
         // POST /api/Case/filter