Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

...

Page Properties
idAPI_Specification

Link

https://ehealthmisapi1.docs.apiary.io/#reference/public.-medical-service-provider-integration-layer/employee-roles/deactivate-employee-role

Посилання на Apiary або Swagger

Resource

/api/employee_roles/{{id}}/actions/deactivate

Посилання на ресурс, наприклад: /api/persons/create

Scope

employee_role:write

Scope для доступу

Components

Scopes model

Зазначається перелік бізнес компонентів, які використовують цей метод, наприклад: ePrescription

Microservices

API paragraph not found

Перелік мікросервісів, які використовує метод API, наприклад: Auth, ABAC

Protocol type

REST

Тип протоколу, який використовується запитом, наприклад: SOAP | REST

Request type

PATCH

Тип запиту API, наприклад: GET, POST, PATCH…

Sync/Async

Sync

Метод є синхронним чи асинхронним?

Public/Private/Internal

Public

Потрібно зазначити тип методу за ступенем доступності

Logic

  1. Only authenticated and authorized user can use this service

  2. Only ACTIVE employee role can be deactivated

  3. Legal entity can deactivate only its own employee roles

...

API paragraph not found

Request data validation

API paragraph not found

Processing

...

Validate legal entity

Check that legal entity is active (status = ACTIVE, SUSPENDED)

  1. Extract client_id from token (token.client_id == legal_entity_id)

  2. Check legal entity status (status = ACTIVE, SUSPENDED)

    1. In case of error - return 409 (Legal entity must be ACTIVE or SUSPENDED)

Validate employee role

  1. Check that employee role with such ID exists in the system (is_active = true)

    1. In case of error - return 404

  2. Check that employee role belongs to the same legal entity as the user

    1. In case of error - return 403

Validate transition

Only ACTIVE employee role can be deactivated

Available transitions

  1. ACTIVE → INACTIVE

In other cases - return 409 error ('{current_status} employee role cannot be DEACTIVATED')

Processing

Update object in DB

Parameter

Source

Description

end_date

Timestamp: now()

Get current date-time

status

Const: INACTIVE

updated_at

Timestamp: now()

Get current date-time

updated_by

Token: user_id

Response structure

See on Apiary

...

Page Properties
idAPI_HTTP status codes

HTTP status code

Message

What caused the error

200

 Response

 

401

 

Invalid access token

403

  • Invalid scope(s

)

Service logic

Authentication

Validate legal entity

Check that legal entity is active (status = ACTIVE, SUSPENDED)

...

  • )

  • Check

...

  1. In case of error - return 409 (Legal entity must be ACTIVE or SUSPENDED)

Validate employee role

...

  • that employee role

...

  1. In case of error - return 404

...

  • belongs to the same legal entity as the user

...

  1. In case of error - return 403

Validate transition

Only ACTIVE employee role can be deactivated

Available transitions

  1. ACTIVE → INACTIVE

In other cases - return 409 error ('{current_status} employee role cannot be DEACTIVATED')

Update object in DB

...

Parameter

...

Source

...

Description

...

end_date

...

Timestamp: now()

...

Get current date-time

...

status

...

Const: INACTIVE

...

updated_at

...

Timestamp: now()

...

Get current date-time

...

updated_by

...

  • failed

404

Validation error

409

Validation error