Server error is thrown when trying to delete a shared application

[HasiniSama]

Description

Deleting a shared application using a sub-org API (Which is not allowed), throws a 500 server error.

Steps to Reproduce

1. Create an application and share it with organizations.
2. Create an organization.
3. Use the below curl with a switched access token, and the shared app ID.

curl -X 'DELETE' \
'https://localhost:9443/o/api/server/v1/applications/{application-id}' \
-H 'accept: */*' \
-H 'Authorization: Bearer {bearer_token}'

Stack Trace:

[2025-02-21 21:33:28,297] [e50803fa-aba2-4ff9-82a1-5ce302890780] ERROR {org.wso2.carbon.identity.api.server.application.management.v1.core.functions.Utils} - errorCode: APP-65001 | message: Pre Delete application operation of listener: org.wso2.carbon.identity.application.mgt.listener.DefaultApplicationResourceMgtListener failed for application with resourceId: 6315c8ad-9472-451d-bf8b-69ef8ffc1cfd org.wso2.carbon.identity.application.common.IdentityApplicationManagementServerException: Pre Delete application operation of listener: org.wso2.carbon.identity.application.mgt.listener.DefaultApplicationResourceMgtListener failed for application with resourceId: 6315c8ad-9472-451d-bf8b-69ef8ffc1cfd
	at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.buildServerException(ApplicationManagementServiceImpl.java:3311)
	at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.deleteApplicationByResourceId(ApplicationManagementServiceImpl.java:3229)
	at org.wso2.carbon.identity.api.server.application.management.v1.core.ServerApplicationManagementService.deleteApplication(ServerApplicationManagementService.java:974)
	at org.wso2.carbon.identity.api.server.application.management.v1.impl.ApplicationsApiServiceImpl.deleteApplication(ApplicationsApiServiceImpl.java:157)
	at org.wso2.carbon.identity.api.server.application.management.v1.ApplicationsApi.deleteApplication(ApplicationsApi.java:204)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
	at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:179)
	at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
	at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:201)
	at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:104)
	at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
	at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
	at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
	at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
	at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:265)
	at org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
	at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
	at org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
	at org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:225)
	at org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:304)
	at org.apache.cxf.transport.servlet.AbstractHTTPServlet.doDelete(AbstractHTTPServlet.java:228)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:561)

Version

7.1.0

Environment Details (with versions)

No response

[HasiniSama]

PRs:

• Restrict fragment application deletion by resource ID wso2-extensions/identity-organization-management#483