ЕСОЗ - публічна документація

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

Purpose

This WS is designed to return medication request request details in person context.

Specification

Apiary

Authorization

  • Verify the validity of access token

    • Return (401, 'Invalid access token') in case of validation fails

  • Verify that token is not expired

    • in case of error - return (401, 'Invalid access token')

  • Check user scopes in order to perform this action (scope = 'medication_request_request:read')

    • Return (403, 'Your scope does not allow to access this resource. Missing allowances: medication_request_request:read') in case of invalid scope(s)

Access to the resource is also managed by ABAC rules .

Service logic

Service returns specified Medication request requests related to the patient:

  1. Get Medication request requests by ID from medication_request_requests (IL database)

  2. Validate data consistency:

    1. Ensure that requested Medication request requests relates to requested Patient (from URL)

      1. Return 403 ('Access denied') in case of error

  3. Render a response according to specification

  • No labels