ЕСОЗ - публічна документація

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Purpose

This WS allows to get a list of Service Requests referenced on or referenced by the Specimen resource directly when the diagnostic investigation is requested.

Key points

  1. Only authenticated and authorized employee with appropriate scope can get a list of Specimen.

  2. Method returns a list of Service Requests referenced on or referenced by the specified Specimen

  3. Service requests can be additionally filtered by status.

  4. ABAC rules and forbidden group filtration are not used here.

  5. Service Request entities does not contain any information about a Patient, only its age and gender.

Specification

Apiary

Authorization

  • Verify the validity of access token

    • in case of error - return 401 “Invalid access token” in case of validation fails

  • Verify that token is not expired

    • in case of error - return 401 “Invalid access token”

  • Check user and client scopes in order to perform this action (scope = 'service_request:read_impersonal')

    • return 403 “Your scope does not allow to access this resource. Missing allowances: service_request:read_impersonal” in case of invalid scope(s)

Search params

All search params are optional. Search with a few params executes according to the logical AND rule.

  • status

    • filter list by specimen.status

Service logic

Service returns all impersonal Service Requests related to the Specimen:

  • Get all Service Requests from service_requests collection (MongoDB) that includes the Specimen. Get even those containing forbidden elements.

  • Get all Service Requests from service_requests collection (MongoDB) that included in the Specimen. Get even those containing forbidden elements.

  • Additionally, filter the list of Service requests by submitted search params

  • Render a response according to specification with a list of found Service Request entities. Do not show info about the Patient identity, except age and gender.

  • No labels