Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

...

  1. Only authenticated and authorized HR, ADMIN employees can register equipments.
  2. Equipments can be registered in MSP, OUTPATIENT, PRIMARY_CARE and EMERGENCY legal entities.
  3. Equipment should be linked with only one heave one active link with division. One division may have zero or many equipments, but equipment w/o division cannot exist.
  4. Legal entity can register equipments for its own divisions only.

...

  1. Verify the validity of access token
    1. Return 401 in case validation fails
  2. Check user scopes in order to perform this action (scope = 'equipment:write')
    1. Return 403 in case invalid scope(s)

Validate request

Validate request using JSON schema (TBD)

Validate legal entity

Check that legal entity is active (status = ACTIVE, SUSPENDED)

  1. Extract client_id from token (token.client_id == legal_entity_id)
  2. Check legal entity status (status = ACTIVE, SUSPENDED)
    1. In case of error - return 409 (Legal entity must be ACTIVE or SUSPENDED)

Validate division

  1. Validate division_id in request body - division exists and is_active = true
    1. Return 422 in case validation fails
  2. Check division_id belongs to the same legal_entity_id (from token) as the user
    1. Return 422 with message  "Division is not within current legal entity" in case validation fails.
  3. Check division status =ACTIVE.
    1. Return 422 with message "Division is not active" in case validation fails.

...

  1. Check external_id within the legal_entity_id.
    1. Return 409 (Duplicated equipment) in case such record already exists

Save object to DB

1. equipments table

ParameterSourceDescription
idUUIDAutogenerated
typeRequest: typeGet from request body
external_idRequest: external_idGet from request body
legal_entity_idToken: client_idExtract client from token
statusConst: ACTIVEBy default ACTIVE for new records
is_activeConst: TRUEAlways TRUE for new records
inserted_atTimestamp: now()Get current date-time
inserted_byToken: user_idExtract user from token
updated_atTimestamp: now()Get current date-time
updated_byToken: user_idExtract user from token

...

ParameterSourceDescription
idUUIDAutogenerated
equipment_idUUIDReference to equipments.id
statusConst: ACTIVEBy default ACTIVE for new records
inserted_byToken: user_idExtract user from token
inserted_atTimestamp: now()Get current date-time

...

ParameterSourceDescription
idUUIDAutogenerated
statusConst: ACTIVEBy default ACTIVE for new records
division_idRequestdivision_idGet from request body
equipment_idUUIDReference to equipments.id
is_activeConst: TRUEAlways TRUE for new records
inserted_atTimestamp: now()Get current date-time
inserted_byToken: user_idExtract user from token
updated_atTimestamp: now()Get current date-time
updated_byToken: user_idExtract user from token

...