There are several types of access to patient medical data in eHealth, such as:

Primary care doctor

1. Authorization
   1. Authorize user using standard flow (Auth)
2. Search for declarations 
   1. Select declarations.patient_id from OPS where 
      1. employee = user_id
      2. status = active
   2. Write selected declarations.id into Redis 
3. Refresh declarations in Redis
   1. Delete information from Redis after N minutes (N = 15 by default)  
   2. If new declaration was signed with the Doctor, delete information from Redis
4. Declarations validation
   1. Search for declarations in Redis
   2. If Redis.? is null, search for declarations (2)
   3. If Redis.? is not null, search for patient_id in array
      
      1. If there are no row with such patient_id return error -"Access denied - you have no declaration with the patient"
      2. If there is a row - allow access

Secondary care doctor

Will be implemented in next phases

Emergency room

Will be implemented in next phases

Public information

A set of public patient medical data such as blood type, allergies intolerances, medications intolerances e.t.c are known as Patient Summary. Patient Summary could be requested by any doctor.