It is possible to upload scans before finalizing exam
I noticed this while testing.
In practice this won't manifest, because the UI prevents downloading the exam PDFs before finalization.
This is still a UI and backend business logic error.
Solution
- Disable "submissions" until exam is finalized
- Return an error from the API if we attempt to upload submissions before the exam is finalized