Purpose

This WS allows to get person’s emergency contact using a medical event as the evidence for the request.

Specification

Apiary

Authorization

1. Verify the validity of access token

   1. in case of error return 401 'Invalid access token'

2. Verify that token is not expired

   1. in case of error return 401 'Invalid access token'

3. Check user scopes in order to perform this action (scope = 'person_emergency_contact:read')

   1. in case of error return 403 'Your scope does not allow to access this resource. Missing allowances: persons_emergency_contact:read'

Validate Patient

• Get Patient identifier from the URL

  • Check it exists in DB

    • in case of error return 404 'Patient is not found'

Validate Medical event

1. Validate medical_event_type from the URL

   1. Check it is one of 'conditions' or 'diagnostic_reports'

      1. in case of error return 404 'no Route matched with those values'

2. Validate medical event identifier from the URL

   1. Check it exists in DB

      1. in case of error return 404 '<medical_event_type> is not found'

   2. Check medical event belongs to patient

      1. in case of error return 404 '<medical_event_type> is not found'

3. Validate medical event has valid status:

   1. if ME is condition, check $.conditions.verification_status != 'entered_in_error'

   2. if ME is diagnostic_report, check $.diagnostic_reports.status != 'entered_in_error'
      In case of error return 403 'Invalid medical event status'

4. Validate medical event creation period:

   1. validate that $.<medical_event_type>.inserted_at <= (now - EMERGENCY_CONTACT_MEDICAL_EVENT_MAX_DAYS_PASSED)
      In case of error return 403 'Medical event was created later than allowed period for data receiving'

More information about EMERGENCY_CONTACT_MEDICAL_EVENT_MAX_DAYS_PASSED configuration you can find here Medical Events Dictionaries and configurations

Service logic

Service returns emergency contact info for a specified person:

• Get person’s data from mpi.persons.emergency_contact table

• Render a response according to specification

• Every request is logged to medical_data.person_data_request_log

  • Record must be created regardless of the result value

  • Set $.request_type='Person Emergency Contact'

Collection description

Collection name: person_data_request_log

This collection is used to store logs of person’s data requests.

Record schema

Consumer schema

Information about who has been consumed patient’s emergency contact

Access_context schema

Information on the basis of which entity access was granted

Example