...
Verify the validity of access token
Return 401 in case validation fails
Check user scopes in order to perform this action (scope = 'preperson_merge_request:write')
Return 403 in case invalid scope(s)
Validate
...
merge request
Validate preperson merge request id exists in DB
In case of error - return 404
Check preperson merge request status is NEW or APPROVED
In case of error - return 422 (Incorrect status to reject preperson merge request)
Validate employee
...
Select inserted_at from il.person_requests of this preperson merge request
Compare user_id belongs to the same legal_entity_id where the preperson merge request was created.
If not match - return 422 error (User doesn’t belong to legal entity where the preperson merge request was created)
...