There are several types of access to patient medical data in eHealth, such as:

Primary care doctor

1. Authorization
   1. Authorize user using standard flow (Auth)
2. Search for declarations 
   1. Select declarations.patient_id from OPS where 
      1. employee = user_id
      2. status = active
   2. Write selected declarations.id into Redis 
3. Refresh declarations in Redis
   1. Delete information from Redis after N minutes (N = 15 by default)  
   2. If new declaration was signed with the Doctor, delete information from Redis
4. Declarations validation
   1. Search for declarations in Redis
   2. If Redis.? is null, search for declarations (2)
   3. If Redis.? is not null, search for patient_id in array
      
      1. If there are no row with such patient_id return error -"Access denied - you have no declaration with the patient"
      2. If there is a row - allow access

...