API. Deactivate Equipment

Purpose

Specification

Apiary: Deactivate equipment

Service logic

1. Only authenticated and authorized HR, ADMIN, OWNER employees from MSP, OUTPATIENT, PRIMARY_CARE, EMERGENCY legal entities can deactivate equipments.
2. Only ACTIVE equipment can be deactivated
3. Legal entity can deactivate only its own equipments

Authentication

1. Verify the validity of access token
   
   1. Return 401 in case validation fails
2. Check scopes in order to perform this action (scope = 'equipment:write')
   1. Return 403 in case invalid scope(s)

Validate legal entity

Check that legal entity is active (status = ACTIVE, SUSPENDED)

1. Extract client_id from token (token.client_id == legal_entity_id)
2. Check legal entity status (status = ACTIVE, SUSPENDED)
   1. In case of error - return 409 (Legal entity must be ACTIVE or SUSPENDED)

Validate equipment

1. Check that equipment with such ID exists in the system (is_active = true)
   1. In case of error - return 404
2. Check that equipment belongs to the same legal entity as the user
   1. In case of error - return 403

Validate transition

Only ACTIVE equipment can be deactivated

Available transitions

1. ACTIVE → INACTIVE

In other cases - return 409 error with message "INACTIVE equipment cannot be DEACTIVATED"

Update object in DB

1. equipments table

Save object to DB

1. equipment_status_hstr table