Page Comparison

Purpose

This WS is designed to mark in error previously created Device dispense in case it was entered in error.

...

1. Verify the validity of access token

   • in case of error - return 401 (“Invalid access token”) in case of validation fails

2. Verify that token is not expired

   • in case of error - return 401 (“Invalid access token”)

3. Check user scopes in order to perform this action (scope = 'device_dispense:mark_in_error')

   • return 403 (“Your scope does not allow to access this resource. Missing allowances: device_dispense:mark_in_error”) in case of invalid scope(s)

4. If BLOCK_UNVERIFIED_PARTY_USERS is true, then check party's data match following condition: verification_status != NOT_VERIFIED or (verification_status = NOT_VERIFIED and updated_at > current_date - UNVERIFIED_PARTY_PERIOD_DAYS_ALLOWED):

   • in case not match - return 403 ("Access denied. Party is not verified")

5. If BLOCK_DECEASED_PARTY_USERS is true, check that party is not deceased (party_verification record does not equal to: dracs_death_verification_status = VERIFIED and dracs_death_verification_reason = MANUAL_CONFIRMED):

   • in case of error - return 403 ("Access denied. Party is deceased")

Validations

Validate request

...

1. Extract client_id from token

   Check that legal entity:

   • “type” it has to be in me_allowed_transactions_le_types config parameter

     • in case of error return 409 “Invalid LegalEntity type“

   • exists and has status = active

     • in case of error return 409 “client_id refers to legal entity that is not active”

   • check that Legal Entity (client_id) from token == $.performer_legal_entity.identifier.value of Device Dispense

     • in case of error return 409 “Device dispense belongs to another legal entity“

Validate digital signature

1. Validate request is signed

   1. in case of error - return 400 (“Invalid signed content”)

2. Check DS is valid and not expired

3. Validate that DS belongs to the user

   1. Check that DRFO from DS and party.tax_id matches

      1. in case of error - return 422 (“Does not match the signer drfo“)

Validate user

Marking in error a Device dispense is allowed for a user if he has one of the following active and approved employee that:

• is an Employee from legal entity where Device dispense is created

  • in case of error - return 409 ("Only an employee from legal entity where device dispense is created can mark it in error")

Validate transition

1. Get current device dispense status

   1. Check that status != “entered_in_error” and status != “completed”

      1. in case of error - return 409 error ('Device dispense in status <status> cannot be marked in error')

For more information look at [UPD] Device dispense status model https://e-health-ua.atlassian.net/wiki/spaces/EH/pages/17782015466.

Validate status

The target status value must be submitted in the order of display in the signed content (media storage)

...