Whenever we have a final state that you shouldn't be able to change, you should be prevented from changing it -- at the model level -- validation error (API or UI)

[ruestitch]

Summary

Whenever you have a state you shouldn't be able to change, you should be prevented from changing it.

Why?

making things consistent

Details

There are two remaining models where we have endpoints you shouldn't retreat from.

Account Request -- rejected or cancelled
Audit -- finalized

Enforce that you can't change these on the models

Criteria for completion

• behaviour as described
• tests to support behaviour as descrived
• no user guide change needed