Purpose

Specification

Apiary

Service logic

1. Only authenticated and authorized user can use this service

2. Only INACTIVE division can be activated

3. Legal entity can activate only its own divisions

Authentication

1. Verify the validity of access token
   

   1. Return 401 in case validation fails

2. Check scopes in order to perform this action (scope = 'division:activate')

   1. Return 403 in case invalid scope(s)

Validate division

1. Check that division with such ID exists in the system (is_active = true)

   1. In case of error - return 404

2. Check that division belongs to the same legal entity as the user

   1. In case of error - return 403

Validate transition

Only INACTIVE divisions can be activated

Available transitions

1. ACTIVE → INACTIVE

In other cases - return 409 error ('{current_status} division cannot be ACTIVATED')

Save object to DB