Add permision check and app status check for deletion

components/application-mgt/org.wso2.carbon.device.application.mgt.core/src/main/java/org/wso2/carbon/device/application/mgt/core/impl/ApplicationManagerImpl.java

@@ -402,12 +402,19 @@ public class ApplicationManagerImpl implements ApplicationManager {
     public List<String> deleteApplication(int applicationId) throws ApplicationManagementException {
         String userName = PrivilegedCarbonContext.getThreadLocalCarbonContext().getUsername();
         int tenantId = PrivilegedCarbonContext.getThreadLocalCarbonContext().getTenantId(true);
+        List<String> storedLocations = new ArrayList<>();
+
+        try {
+            if (!isAdminUser(userName, tenantId, CarbonConstants.UI_ADMIN_PERMISSION_COLLECTION)) {
+                throw new ApplicationManagementException(
+                        "You don't have permission to delete this application. In order to delete an application you " +
+                                "need to have admin permission");
+            }
 
             if (validateApplication(applicationId) == null) {
                 throw new ApplicationManagementException("Invalid Application");
             }
             List<ApplicationRelease> applicationReleases = getReleases(applicationId);
-        List<String> storedLocations = new ArrayList<>();
             if (log.isDebugEnabled()) {
                 log.debug("Request is received to delete applications which are related with the application id " +
                                   applicationId);
@@ -422,9 +429,10 @@ public class ApplicationManagerImpl implements ApplicationManager {
                 addLifecycleState(applicationId, applicationRelease.getUuid(), newAppLifecycleState);
                 storedLocations.add(applicationRelease.getAppHashValue());
             }
-        try {
             ConnectionManagerUtil.openDBConnection();
             ApplicationManagementDAOFactory.getApplicationDAO().deleteApplication(applicationId);
+        } catch (UserStoreException e) {
+            e.printStackTrace();
         } finally {
             ConnectionManagerUtil.closeDBConnection();
         }
@@ -437,7 +445,6 @@ public class ApplicationManagerImpl implements ApplicationManager {
         String userName = PrivilegedCarbonContext.getThreadLocalCarbonContext().getUsername();
         int tenantId = PrivilegedCarbonContext.getThreadLocalCarbonContext().getTenantId(true);
         Application application = validateApplication(applicationId);
-
         if (application == null) {
             throw new ApplicationManagementException("Invalid Application ID is received");
         }
@@ -445,14 +452,22 @@ public class ApplicationManagerImpl implements ApplicationManager {
         if (applicationRelease == null) {
             throw new ApplicationManagementException("Invalid Application Release UUID is received");
         }
-
         LifecycleState appLifecycleState = getLifecycleState(applicationId, applicationRelease.getUuid());
+        String currentState = appLifecycleState.getCurrentState();
+        if (AppLifecycleState.DEPRECATED.toString().equals(currentState) || AppLifecycleState
+                .REJECTED.toString().equals(currentState) || AppLifecycleState.UNPUBLISHED.toString().equals
+                (currentState) ) {
             LifecycleState newAppLifecycleState = new LifecycleState();
             newAppLifecycleState.setPreviousState(appLifecycleState.getCurrentState());
             newAppLifecycleState.setCurrentState(AppLifecycleState.REMOVED.toString());
             newAppLifecycleState.setTenantId(tenantId);
             newAppLifecycleState.setUpdatedBy(userName);
             addLifecycleState(applicationId, applicationRelease.getUuid(), newAppLifecycleState);
+        }else{
+            throw new ApplicationManagementException("Can't delete the application release, You have to move the " +
+                                                             "lifecycle state from "+ currentState + " to acceptable " +
+                                                             "state") ;
+        }
         return applicationRelease.getAppHashValue();
     }