| Table of Contents | ||||
|---|---|---|---|---|
|
Required parameters are marked with "*"
Якщо інформації по відповідному параметру немає, потрібно зазначити: “APIparagraph not found”.
Purpose*
This WS allows to get detailed procedure info from Admin panel.API paragraph not found
Specification*
| Page Properties | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Logic*
This WS allows to get detailed procedure info from Admin panel.
Key points
This is a graphQl query used in Administration panel only
Only authenticated and authorized NHS employee with appropriate scope can get details.
Query returns single procedure by person (mpi id) and procedure identifier.
Filtration with forbidden group items is worked here. So NHS employee should have an approval from patient to see a procedure with forbidden elements.
Query should be invoked only if /wiki/spaces/AFC/pages/16680386561 for monitoring exists for current user and corresponding patient (ABAC rule_-2).
Input parameters
...
Input parameter
...
Values
...
Type
...
Description
...
Example
...
patient_id
...
String
...
Unique patient identifier
...
e549c257-232e-4dab-9f1e-b2322cac3968
...
procedure_id
...
String
...
Unique procedure identifier
...
340b86fd-23f3-4a33-94c5-8ec19d116c33
Request structure*
API paragraph not found
Authorize*
Verify the validity of access token
in case of error - return 401 (“Invalid access token”) in case of validation fails
Verify that token is not expired
in case of error - return 401 (“Invalid access token”)
Check user scopes in order to perform this action (scope = 'procedure:practical_monitor')
return 403 (“Your scope does not allow to access this resource. Missing allowances: procedure:practical_monitor”) in case of invalid scope(s)
Check user has access to resource according to @rule_-2 in ABAC
return 403 (“Access denied. Justification required“) in case of error
Request to process the request using a token in the headers
Headers*
Наприклад:
Content-Type:application/json
Authorization:Bearer mF_9.B5f-4.1JqM
Request data validation*
Validate legal entity
Extract client_id from token.
Check client scopes in order to perform this action (scope = 'procedure:practical_monitor')
in case of error - return 403 (“Your scope does not allow to access this resource. Missing allowances: procedure:practical_monitor”)
Check legal entity status (status = ACTIVE)
In case of error - return 409 ('client_id refers to legal entity that is not active')
Validate request
Check required
personIdsubmitted.return 404 (“not found“) in case not exist
Check required procedure
Idsubmitted.return 404 (“not found“) in case not exist or not related to the person
return 403 (“Access denied“) in case procedure has forbidden group items. Take into account approvals granted to NHS employee on forbidden groups (look at Medical Events filtration by Forbidden groups for details)
Processing*
Service logic
...
Get procedure by id and patient_id
...
API paragraph not found
Input parameters
Input parameter | Values | Type | Description | Example |
|---|---|---|---|---|
patient_id | String | Unique patient identifier |
| |
procedure_id | String | Unique procedure identifier |
|
Request structure*
API paragraph not found
Authorize*
Request to process the request using a token in the headers
Headers*
Наприклад:
Content-Type:application/json
Authorization:Bearer mF_9.B5f-4.1JqM
Request data validation*
API paragraph not found
Processing*
API paragraph not found
Response structure*
See on Apiary
...