It is possible to cancel deletion processes with expired grace periods (#989)

* fix: throw if deletion grace period is expired

* test: write a test for it

Author: tnotheis

Modules/Devices/src/Devices.Domain/DomainErrors.cs

@@ -64,6 +64,12 @@ public static DomainError GracePeriodHasNotYetExpired()
             "The deletion via this deletion process cannot be started because the grace period has not yet expired.");
     }
 
+    public static DomainError GracePeriodHasAlreadyExpired()
+    {
+        return new DomainError("error.platform.validation.device.gracePeriodHasAlreadyExpired",
+            "You cannot perform this action, because the grace period of this deletion process has already expired.");
+    }
+
     public static DomainError DeletionProcessMustBePastDueApproval()
     {
         return new DomainError("error.platform.validation.device.noDeletionProcessIsPastDueApproval", "No deletion process is past due approval.");

Modules/Devices/src/Devices.Domain/Entities/Identities/IdentityDeletionProcess.cs

@@ -181,6 +181,9 @@ public void CancelAsOwner(IdentityAddress address, DeviceId cancelledByDevice)
         if (Status != DeletionProcessStatus.Approved)
             throw new DomainException(DomainErrors.DeletionProcessMustBeInStatus(DeletionProcessStatus.Approved));
 
+        if (GracePeriodEndsAt < SystemTime.UtcNow)
+            throw new DomainException(DomainErrors.GracePeriodHasAlreadyExpired());
+
         ChangeStatus(DeletionProcessStatus.Cancelled, address, address);
         CancelledAt = SystemTime.UtcNow;
         CancelledByDevice = cancelledByDevice;

Modules/Devices/test/Devices.Domain.Tests/Identities/CancelDeletionProcessAsOwnerTests.cs

@@ -58,6 +58,21 @@ public void Throws_when_deletion_process_is_in_wrong_status()
         acting.Should().Throw<DomainException>().Which.Code.Should().Be("error.platform.validation.device.deletionProcessIsNotInRequiredStatus");
     }
 
+    [Fact]
+    public void Throws_when_grace_period_has_expired()
+    {
+        // Arrange
+        var identity = TestDataGenerator.CreateIdentityWithApprovedDeletionProcess();
+
+        SystemTime.Set(DateTime.UtcNow.AddDays(IdentityDeletionConfiguration.Instance.LengthOfGracePeriodInDays));
+
+        // Act
+        var acting = () => identity.CancelDeletionProcessAsOwner(identity.DeletionProcesses[0].Id, identity.Devices[0].Id);
+
+        // Assert
+        acting.Should().Throw<DomainException>().Which.Code.Should().Be("error.platform.validation.device.gracePeriodHasAlreadyExpired");
+    }
+
     [Fact]
     public void Raises_domain_events()
     {