Specification

Apiary

Declaration request logic

1. Only authenticated and authorized user can use this service

2. New and Approved declaration request can be rejected

3. The request can be rejected only by the employee who works in the same legal entity in which the request was made.

Authorize user

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check scopes in order to perform this action (scope = 'declaration_request:write')

   1. Return 403 in case invalid scope(s)

Validate declaration request

1. Check that declaration request with such ID exists in the system (is_active = true)

   1. In case of error - return 404

2. Check that declaration request belongs to the same legal entity as the user

   1. In case of error - return 403

Change declaration request

1. Change entity status in IL_DB.declaration_request to REJECTED

2. Set updated_at - now() (Get current date-time)

3. Set updated_by - user_id (Extract user from token)