Prevent destination facility from marking shift as complete (#2114)

* Prevent destination facility from marking shift as complete

* Update care/facility/api/serializers/shifting.py

Co-authored-by: Aakash Singh <mail@singhaakash.dev>

* Update care/facility/api/serializers/shifting.py

* allow only origin facility user to mark shifting request as completed

---------

Co-authored-by: Aakash Singh <mail@singhaakash.dev>
Co-authored-by: Vignesh Hari <vichuhari100@gmail.com>
Co-authored-by: Khavin Shankar <khavinshankar@gmail.com>

care/facility/api/serializers/shifting.py

@@ -323,8 +323,15 @@ def update(self, instance, validated_data):
         if (
             "status" in validated_data
             and validated_data["status"] == REVERSE_SHIFTING_STATUS_CHOICES["COMPLETED"]
+            and not has_facility_permission(user, instance.origin_facility)
         ):
-            discharge_patient(instance.patient)
+            raise ValidationError(
+                {
+                    "status": [
+                        "Permission Denied - Only staff from the origin facility can mark the shift as complete."
+                    ]
+                }
+            )
 
         old_status = instance.status
         new_instance = super().update(instance, validated_data)