...

1. Use service request

Validations

Authorization

• Verify the validity of access token
  • Return (401, 'unauthorized') in case of validation fails
• Verify that token is not expired
  • in case of error - return (401, 'unauthorized')
• Check user scopes in order to perform this action (scope = 'service_request:write')
  1. Return (403, 'invalid scopes') in case of invalid scope(s)

...

1. Validate used_by_legal_entity
   1. ME.service_request.used_by_legal_enity.identifier.value=token.client_id
      1. in case of error return 409 "Service request is used by another legal entity"
2. Validate service request status
   1. ME.service_request.status  == "in_progress"
      1. in case of error return 409 "Invalid service request status"
3. Validate completed_with
   1. $.completed_with as a Reference(encounter| diagnostic_report)

Service logic

1. Update service request status to "completed"
2. Update status history
3. Save completed_with to service_request