Page Comparison

...

1. if episode_of_care is presented in request as the code of resource

   1. Check episode_of_care in the request exists and is in active or closed status in DB

      1. in case of error return - 422 (Episode is canceled)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

2. if diagnostic_report is presented in request as the code of resource

   1. Check diagnostic_report block in the request exists and is in final status in DB

      1. in case of error return - 422 (Diagnostic report in \"entered_in_error\" status can not be referenced or Diagnostic report with such id is not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

3. if care_plan is presented in request as the code of resource

   1. Check care_plan in the request exists in DB

      1. in case of error return - 422 (Care plan with such id is not found)

   2. Check there no other objects in request

      1. in case of error return - 422 (Approval for care plan can not contain other entities)

   3. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

4. if encounter  is presented in request as the code of resource

   1. Check encounter in the request exists in DB

      1. in case of error return - 422 (not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

   3. Check is status of episode from encounter = 'active'

      1. in case of error return - 422 ("Encounter refers to episode that is not active")

5. if procedure is presented in request as the code of resource

   1. Check procedure in the request exists in DB

      1. in case of error return - 422 (not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

...

1. If service_request block is presented in request

   1. Get Service_request details (only in active status)

   2. use Response.permitted_resources as resources for approval(could be episode or diagnostic_report).

2. If resource from granted_to = 'legal_entity':

   1. Check if status of legal_entity in (ACTIVE, SUSPENDED):

      1. in case of error return - 422 (Legal entity should be active)

Validate forbidden_group

1. if forbidden_group block is presented in request

   1. Check forbidden group in the request exists and is_active in DB

      1. in

      (ACTIVE, SUSPENDED)

      1. case of error return - 404 (not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 (Legal entity should be active"$.resource. value is not allowed in enum")

Validate

...

diagnoses_group

1. if forbidden diagnoses_group block is presented in request

   1. Check forbidden diagnoses_group in the request exists and is_active in DB

      1. in case of error return - 404 (not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

Validate

...

service_group

1. if diagnosesservice_group block is presented in request

   1. Check diagnosesservices_group in the request exists and is_active in DB

      1. in case of error return - 404 (not found)

2. Check if resource from granted_to = 'employee':

   1. in case of error return - 422 ("$.resource. value is not allowed in enum")

Validate patient

1. if patient block is presented in request

   1. Get patient_id from URL:

      1. Check person_id from the request equal to the patient_id from URL

         1. in case of error return - 404 (“Approval for one patient can not be created in another patient’s context”)

      2. exists and is_active in DB

         1. in case of error return - 404 (Person is not found)

   2. Check if resource from granted_to = 'employee':

      1. in case of error return - 422 ("$.resource. value is not allowed in enum")

...

...

1. All the approvals in status "new" should be deleted 12 hours after creation - env. configuration parameter

2. All approvals with service_group has its own expires_at config parameter - env. configuration parameter

3. All approvals with diagnoses_group has its own expires_at config parameter - env. configuration parameter

4. All approvals with forbidden_group has its own expires_at config parameter - env. configuration parameter

5. All approvals with care_plan has its own expires_at config parameter - env. configuration parameter

6. All approvals with patient has its own expires_at config parameter - env. configuration parameter

7. Approvals with child_resources will be created ON entity which is context of this child_resources

8. For approvals on child_resource with resource and on service_request:

   1. set child resource to block reason

   2. set service_request to block reason

9. If resource from granted_to = employee:
   Check if for granted_resource and\or for reason there are forbidden groups:

   1. if there are items from forbidden group

      1. check type of authentication_method for patient

         1. If type = 'OTP' send SMS (Код <code> для доступу до даних про ВІЛ/РПП https://bit.ly/nszu1677f )

   2. if there NO forbidden group items and diagnoses_group block is presented in request

      1. if diagnoses_group type is ICD10:

         1. check type of authentication_method for patient

            1. If type = 'OTP' send SMS (Код <code>: доступ на групу діагнозів {diagnoses_group_code} http://bit.ly/nszu1677b )

      2. if diagnoses_group type is ICPC2:

         1. check type of authentication_method for patient

            1. If type = 'OTP' send SMS (Код <code> доступ на групу діагнозів {diagnoses_group_code} http://bit.ly/nszu1677e )

      3. if there NO forbidden group items and service_group block is presented in request

         1. check type of authentication_method for patient

            1. If type = 'OTP' send SMS (Код ****: доступ на групу сервісів {service_group_code} eHealth )

   3. else if there NO forbidden group items

      1. check type of authentication_method for patient

         1. If type = 'OTP' send SMS (Код авторизації дій в системі eHealth: <code>')

10. If resource from granted_to = legal_entity:

    1. check type of authentication_method for patient

       1. If type = 'OTP' send SMS (Код <code>: згода на обробку персональних даних eZdorovya )

...