Table of Contents | ||||
---|---|---|---|---|
|
...
Request to process the request using a token in the headers
Headers
Наприклад:
Content-Type:application/json
Authorization:Bearer {{access_token}}
API-key:{{mis_client_secret}}
...
Extract user_id from token.
Check user has an active and approved employee from legal entity (token) that for which one of the conditions is TRUE:
has an active Approval granted by the Patient on write or read the on write or read the Care plan resource (care plan id from URL)
Return 403 ('Access denied') in case employee has no Approval on read or write
has an active declaration with the patient
Return 403 ('Access denied') in case there no active declaration with patient and none of other conditions is true
user belongs to the legal entity where the care_plans were created
Return 403 ('Access denied') in case employee belongs to another legal_entity and none of conditions above is true
Processing
Service logic
Service returns activity list within specified Care plan related to the patient:
...