...

• A user of MSP, PRIMARY_CARE, OUTPATIENT (DOCTOR, SPECIALIST, etc) can see all Medication request for which he is a doctor (employee_id) from the user's legal entity.

• A user of MSP, PRIMARY_CARE (DOCTOR, etc) can see all the Medication requests of the patients whom he has an active declaration with by yourself a doctor (employee_id).

• Users of PHARMACY can see all Medication requests (without limitations).

• Users of MSP, PRIMARY_CARE, OUTPATIENT (DOCTOR, SPECIALIST, etc) can see all Medication requests based on the approval of the care plan that is contained in the Medication request.

...

Logic

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check user scopes in order to perform this action (scope = 'medication_request:details')

   1. Return 403 in case invalid scope(s)

3. Get `client_type` from `mithril.clients`

4. Get `my_party_id`  from `$.context.user_id`

5. Get list from `prm.employees` for this `party_id`  & `$.context.legal_entity_id`

6. Search Medication requests by filters:

   Code Block

   SELECT * FROM medication_request MR     INNER JOIN employees E         ON E.party_id = my_party_id             AND (E.id = $.employee_id OR $.employee_id IS NULL)             AND (E.legal_entity_id == $.context.legal_entity_id OR $.context.legal_entity_id IS NULL)     LEFT JOIN declarations D         ON D.Employee_id = E.id             AND E.status = ACTIVE             AND D.status = ACTIVE             AND MR.person_id = D.person_id WHERE (MR.id = $.id OR MR.request_number = $.id)     AND MR.employee_id == E.id     AND MR.is_active = TRUE

...