Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Ruels 

9131725262729
#DescriptionRouteInputExpected resultActual ResultStatus
1Scope validation
token without scope "episode:read"403403passed
2

Data consistency validation: get entity by id using wrong episode id

{{host}}/api/patients/{{patient_id}}/episodes/{{WRONG_episode_id}}/encounters/encounter_id
404200FAILED
3Data consistency validation: get entities by search params using wrong episode id{{host}}/api/patients/{{patient_id}}/episodes/{{WRONG_episode_id}}/encounters?
404200FAILED
4User with active declaration receives access: HPepisode by iddoctor
with an active declaration
from third-party LE, no approval
200



45episode by search params
200



56encounter by id
200

67encounter by search params
200

78encounter by id via episode context
200

89encounter by search params via episode context
200
list filtered

10condition by id
200

1011condition by search params
200

1112condition by id via episode context
200

1213condition by search params via episode context
200
list filtered

14observation by id
200

1415observation by search params
200

1516observation by id via episode context
200

1617observation by search params via episode context
200
list filtered

18immunization by id
200

1819immunization by search params
200

1920immunization by id via episode context
200

2021immunization by search params via episode context
200
list filtered


2122allergy_intolerance by id
200

2223allergy_intolerance by search params
200

2324allergy_intolerance by id via episode context
200

2425allergy_intolerance by search params via episode context

200

list filtered



26User with episode aproval approval receives access: HP


doctor
without an active declaration
from third-party LE
having approval



27User with episode approval try to receive access: approval expired

403 
access denied

28User with episode approval try to receive access: no episode matches

403 
access denied


29User from the same LE receives access: HP1-22doctor without an active declaration  from managing_organization, no approval200403 
access denied
FAILED
30Combination of rules




3031User with no permissions 1-22
403 
access denied
403 
access denied
passed

...