RC (CSI-2794) Get Care Plans by search params v2

• Purpose

• Specification

• Authorization

• Validate Patient

• Service logic

Purpose

This WS allows to get Care plan list with full information for a specified patient filtered by search params. List should be returned without activities. ABAC rules and forbidden group filtration are used here.

Specification

Apiary

Authorization

• Verify the validity of access token

  • Return (401, 'unauthorized') in case of validation fails

• Verify that token is not expired

  • in case of error - return (401, 'unauthorized')

• Check user scopes in order to perform this action (scope = 'care_plan:read')

  • Return (403, 'invalid scopes') in case of invalid scope(s)

Validate Patient

• Get Patient identifier from the URL

• Check it exists in DB

  • Return 404 ('not found') in case of error

Service logic

Service returns all Care plans related to the patient filtered by submitted parameters:

• Filter by ABAC rules and forbidden group filtration

• Get all care plans by patient_id from care_plans collection (MongoDB)

• Filter list above by submitted search parameters

• Render a response according to specification with found Care plan entities. Care plans should be rendered without their activities.