Purpose

This WS allows to link medical data of unidentified person to person in eHealth. Thus it helps person who was unidentified during some period to store all its medical history.

Specification

Apiary

Service logic

1. Only authenticated and authorized SPECIALIST, ASSISTANT or RECEPTIONIST employees can merge prepersons with prepersons.

2. Prepersons can be merged in EMERGENCY or OUTPATIENT legal entities.

3. Employee can merge any active preperson to any active person.

4. To merge person with preperson only their MPI ids needed.

5. Change status should be logged in the Event manager.

Authentication

1. Verify the validity of access token

   1. Return 401 in case validation fails

2. Check user scopes in order to perform this action (scope = 'merge_request:write')

   1. Return 403 in case invalid scope(s)

3. If BLOCK_UNVERIFIED_PARTY_USERS is true, then check party's data match following condition: verification_status != NOT_VERIFIED or (verification_status = NOT_VERIFIED and updated_at <= current_date - UNVERIFIED_PARTY_PERIOD_DAYS_ALLOWED):

   1. in case not match - return 403 ("Access denied. Party is not verified")

Validate request

Validate request using schema (TBD)

Validate legal entity

Check that legal entity is active (status = ACTIVE)

1. Extract client_id from token

2. Check legal entity status (status = ACTIVE)

   1. In case of error - return 409 (Legal entity must be ACTIVE)

Validate person

Ensure master_person_id is person

1. Validate master_person_id UUID

   1. In case of error - return 422

2. Find person by id in mpi.persons

   1. In case of error - return 404 ( Person not found)

3. Check person status is active

   1. In case of error - return 409 (Person is not active)

Validate preperson

Ensure merge_person_id is preperson

1. Validate merge_person_id UUID

   1. In case of error - return 422

2. Find preperson by id in mpi.prepersons

   1. In case of error - return 404 (Preperson not found)

3. Check preperson status is active in mpi.prepersons

   1. In case of error - return 409 (Preperson is not active)

4. Check if exists another preperson merge requests with status NEW or APPROVED for this preperson

   1. if exists - update status of another requests to CANCELLED

5. Check if preperson has at least one episode( status!= "entered_in_error")

   1. if no episodes - return 409 (Preperson has no episodes)

Validate authorize_with

If submitted, validate authorize_with field for a person as described on create Person request process. But for success case set it to il.merge_requests.authentication_method_current field instead.

Generate verification code

Validate person authentication method in mpi.person_authentication_methods table:

• If type is OTP or THIRD_PERSON - Generate verification code as on create patient request process.

• If type is OFFLINE - Generate uploaded URLs as on create patient request process. Set il.merge_requests.documents

In case no auth methods found (null) - return error with code 409 (Person has no auth methods)

Save object to DB

il.merge_requests table