Validate parallel editings (new)

Whether Person data were not changed by other users (MSP, NHS) of NHS system. By preliminary keeping value updated_at (saved out of initial query of personal data during start of editing process) and checking at the moment of saving data:

• If MPI.person.(id = $.id).updated_at = $.updatedAtForValidation then Ok

  • in case of error return 422, 'Person's data were changed while you were editing. Please repeat your steps for update'

Validate Person’s status id in DB and deduplication controls

• If person.id is in request then 

  • if $.person.id is UUID and UUID_version($.person.id is UUID) = 4 then ok

    • in case of error, return 422, “person.id is not UUID type or UUID version is not appropriate“

  • search person by person.id in MPI 

    • in case of error return 404, "not found"

  • If MPI.persons.($.id).status = “active” then ok

    • in case of error return 422 - msg "The Person is not active, therefore any updates of personal data are prohibited”

  • Scoring of level of updates

    Check decoded signed content within system’s deduplication controls within two validations . I.e.

    • Deduplication validation 1 check whether level of changes is “so high” that it is necessary to prohibit (forbid) saving changes.

      • if calculated_score (current data, updates_of_Person) >  PERSON_ONLINE_DEDUPLICATION_UPDATE_SCORE_NHS_ADMIN
then Validation 1 passed, check other validations

        • else return error 409, "Level of conducted changes is higher than permitted. Updates can't be saved. Please check whether you have selected appropriate Person for changes. Calculated score: <calculated_score>. Permitted score: PERSON_ONLINE_DEDUPLICATION_UPDATE_SCORE_NHS_ADMIN) "

    • Deduplication validation 2 - whether there are no other Persons, which highly similar to current updates of a Person

      • if calculated_score (updates_of_Person, other_similar_Persons) <  PERSON_ONLINE_DEDUPLICATION_MATCH_SCORE_NHS_ADMIN
then Validation 2 passed, check other validations

        • else return error 409, "We have found Person(s) with high similarity in DB. Calculated score is equal or greater than permitted PERSON_ONLINE_DEDUPLICATION_MATCH_SCORE_NHS_ADMIN. Please check whether you have selected appropriate Person for changes and investigate possible duplicates of the Person."

  • Deduplication validation 1 and 2 might be turned off by setting independently any of the following parameters

    • PERSON_ONLINE_DEDUPLICATION_UPDATE_SCORE_NHS_ACTIVE = true

    • PERSON_ONLINE_DEDUPLICATION_MATCH_SCORE_NHS_ACTIVE = true

Check “patient_signed” flag.

This field should not be transferred. And therefore BE should not overwrite this field in DB

Check “process_disclosure_data_consent” flag.

This field should not be transferred. And therefore BE should not overwrite this field in DB

Validate confidant person

If person age < prm.global_parameters.no_self_auth_age then

check existence of confidant_person

• in case of error return 422 - msg "Confidant person is mandatory for children"

Validate confidant person age >= prm.global_parameters.no_self_auth_age:

• in case of error return 422 - msg "Third person must be adult"

validate presence of a secret word:

• in case of error return 422,

Check that confidant person document type (in documents_person field) exists in IDENTITY_DOCUMENT_TYPES config parameter

• in case of error return 422 - msg “Submitted document type is not allowed“

Validate "tax_id"

• tax_id has validation pattern - `^[0-9]{10}$`

  • if doesn't match, return error 422 "string does not match pattern ..."

• NHS employee can update birth_date, but

• (If VALIDATE_TAX_ID_WITH_BIRTH_DATE_GENDER_AND_CHECK_SUM is false then ok

  • If (GetBirthDateFromTaxId($.tax_id) != $.birth_date) or (GetGenderFromTaxId($.tax_id) != $.gender) then

    • in case of error, return 422 “Person's tax ID is not valid.“)

  • else ok

• NHS employee can update tax_id:

  • from null to tax_id2, in case that there is no any person with tax_id2
if tax_check_cnt_1 = 0 then ok
    How to get tax_check_cnt_1: select count(*) tax_check_cnt_1 select * from persons where tax_id = $.person.tax_id and status = 'active' and id <> $.person.id and is_active = true

    • in case of error, return 422 “There is another active person in DB with the same Tax_id. Updates to Personal data were not saved. “

  • And from tax_id1 to tax_id2, in case that there is no any person with tax_id2
if tax_check_cnt_1 = 0 then ok
    How to get tax_check_cnt_1: select count(*) tax_check_cnt_1 select * from persons where tax_id = $.person.tax_id and is_active = 'active' and id <> $.person.id

    • in case of error, return 422 “There is another active person in DB with the same Tax_id. Updates to Personal data were not saved. “

  • from tax_id1 to null

  • from null to null

Check "no_tax_id" flag

• "no_tax_id" can be null in the message, if tax_id is null also.

• If "no_tax_id"= true, tax_id field should be empty

  • in case of error return 422

• If "no_tax_id"=false and age>14, tax_id should be present

  • in case of error return 422

Validate person documents

1. issued_at, issued_by is mandatory for documents

2. Validate dates

   1. issued_at <= now() and issued_at => birth_date

      1.  in case `issued_at > now()` show error 422, "Document issued date should be in the past"

      2.  in case `issued_at < person.birth_date` show error 422, "Document issued date should greater than person.birth_date "

   2. expiration_date > now()

      1.  in case error show 422, "Document expiration_date should be in the future"

      2. expiration_date is mandatory for document_type

         • NATIONAL_ID

         • COMPLEMENTARY_PROTECTION_CERTIFICATE

         • PERMANENT_RESIDENCE_PERMIT

         • REFUGEE_CERTIFICATE

         • TEMPORARY_CERTIFICATE

         • TEMPORARY_PASSPORT

      3. in case of error return 422, "expiration_date is mandatory for document_type $.documents.type"

3. Validate documents_type.number according to json schema 

   1. PASSPORT - `^((?![ЫЪЭЁ])([А-ЯҐЇІЄ])){2}[0-9]{6}$`

   2. NATIONAL_ID - `^[0-9]{9}$`

   3. BIRTH_CERTIFICATE - `^((?![ЫЪЭЁыъэё@%&$^#`~:,.*|}{?!])[A-ZА-ЯҐЇІЄ0-9№\\/()-]){2,25}$`

   4. COMPLEMENTARY_PROTECTION_CERTIFICATE - `^((?![ЫЪЭЁ])([А-ЯҐЇІЄ])){2}[0-9]{6}$`

   5. REFUGEE_CERTIFICATE - `^((?![ЫЪЭЁ])([А-ЯҐЇІЄ])){2}[0-9]{6}$`

   6. TEMPORARY_CERTIFICATE - `^(((?![ЫЪЭЁ])([А-ЯҐЇІЄ])){2}[0-9]{4,6}|[0-9]{9}|((?![ЫЪЭЁ])([А-ЯҐЇІЄ])){2}[0-9]{5}\\/[0-9]{5})$`

   7. TEMPORARY_PASSPORT - `^((?![ЫЪЭЁыъэё@%&$^#`~:,.*|}{?!])[A-ZА-ЯҐЇІЄ0-9№\\/()-]){2,25}$`

4. 'unzr' can be with null value in the message.

5. if `unzr` exists and is not null and matches "^[0-9]{8}-[0-9]{5}$" check if first 8 symbols = birth_date

   1. in case of error return 422, msg "Birthdate or unzr is not correct"

6. if documents.type=NATIONAL_ID

   1. check if unzr exists in request, in case of error return 422, msg "unzr is mandatory for document type NATIONAL_ID"

7. Document numbersmaxLength < 25 

8. Check that submitted document type exists in IDENTITY_DOCUMENT_TYPES config parameter

   1. in case of error - return 422 ('Submitted document type is not allowed')

9. Check submitted person document types exist in PERSON_REGISTRATION_DOCUMENT_TYPES config parameter that contains values from DOCUMENT_TYPE dictionary

   • in case of error - return 422 ('Submitted document type is not allowed')

10. Check document types from PERSON_LEGAL_CAPACITY_DOCUMENT_TYPES config parameter (that prove persons legal capacity) are not submitted if persons age is less then no_self_registration_age global parameter or greater then person_full_legal_capacity_age global parameter

    • in case of error - return 422 ('<Document type> can not be submitted for this person') with first found document type

11. If at least one document type from PERSON_LEGAL_CAPACITY_DOCUMENT_TYPES config parameter is submitted, check that at least one document type from PERSON_REGISTRATION_DOCUMENT_TYPES is submitted

    • in case of error - return 422 ('Document that proves personal data must be submitted.')

12. If at least one document type from PERSON_LEGAL_CAPACITY_DOCUMENT_TYPES config parameter is submitted, check that only one legal capacity document type is submitted

    • in case of error - return 422 ('Only one legal capacity document must be submitted')

Validate NHS request fields

• nhs_request_number, nhs_request_comment are mandatory

• Validate them according to json schema 

  • if doesn't match, return error 422 “ required property %{property} was not present"