0.2.2 - ci-build

FastAccessControl, published by MITRE. This guide is not an authorized publication; it is the continuous build for version 0.2.2 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/awatson1978/fhir-access-control-ig/ and changes regularly. See the Directory of published versions

: Scenario 2C - XML Representation

Draft as of 2022-06-14

Raw xml | Download



<TestScript xmlns="http://hl7.org/fhir">
  <id value="TestScript-Scenario2C"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: TestScript TestScript-Scenario2C</b></p><a name="TestScript-Scenario2C"> </a><a name="hcTestScript-Scenario2C"> </a><a name="TestScript-Scenario2C-en-US"> </a><p><b>url</b>: <a href="StructureMap-PolstToConsent.html">PolstToConsent</a></p><p><b>version</b>: 0.2.2</p><p><b>name</b>: Scenario 2C</p><p><b>title</b>: R4 TestScript - PHI System - Patient Multi-User Access</p><p><b>status</b>: Draft</p><p><b>date</b>: 2022-06-14 23:19:30+0000</p><p><b>publisher</b>: MITRE</p><p><b>contact</b>: MITRE: <a href="https://www.mitre.org">https://www.mitre.org</a></p><blockquote><p><b>fixture</b></p><blockquote><p><b>id</b></p>73594318-988d-5647-b3d8-1f1841578c27</blockquote><p><b>autocreate</b>: true</p><p><b>autodelete</b>: true</p><p><b>resource</b>: <a href="PharmLoc2">OrgA CT Location 2</a></p></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>3823df50-2a7e-48e7-8f70-921067974a05</blockquote><p><b>name</b>: 0.1 Create hospital organization</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-update">Test script operation code</a> update: Update</td><td>Organization</td><td>Hospital Organization</td><td>PUT /baseR4/Organization/J4aabjHFaXv73ZvME</td><td>json</td><td>true</td><td>PUT</td><td>/baseR4/Organization/J4aabjHFaXv73ZvME</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 201(Success).</td><td>created</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>80ca8957-a591-4a3c-835e-7018bf03660b</blockquote><p><b>name</b>: 0.2  Create Jane Doe patient</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-update">Test script operation code</a> update: Update</td><td>Patient</td><td>Jane Doe - Patient</td><td>PUT /baseR4/Patient/6kKu6iPnJtMozpaBp</td><td>json</td><td>true</td><td>PUT</td><td>/baseR4/Patient/6kKu6iPnJtMozpaBp</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 201(Success).</td><td>created</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>ef27765c-a138-5669-b255-17bb91d30cc0</blockquote><p><b>name</b>: 0.3 Create Katie Klepto patient</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-update">Test script operation code</a> update: Update</td><td>Patient</td><td>Katie Klepto</td><td>PUT /baseR4/Patient/qirz9TRTPfkDgBSs8</td><td>json</td><td>true</td><td>PUT</td><td>/baseR4/Patient/qirz9TRTPfkDgBSs8</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 201(Success).</td><td>created</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>ed7f8206-22ad-4bce-b3d8-83980dc0af5e</blockquote><p><b>name</b>: 0.5 Create Susan social worker</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-update">Test script operation code</a> update: Update</td><td>Practitioner</td><td>Susan Social</td><td>PUT /baseR4/Practitioner</td><td>json</td><td>true</td><td>PUT</td><td>/baseR4/Practitioner</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 201(Success).</td><td>created</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>309ca261-92bf-5063-ba69-77f29c52c671</blockquote><p><b>name</b>: 0.6 Create consent records on accessing patient data.</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-update">Test script operation code</a> update: Update</td><td>Restriction on accessing other patients data</td><td>PUT /baseR4/Consent/cotkDnGQjpHijDsRR</td><td>json</td><td>true</td><td>PUT</td><td>/baseR4/Consent/cotkDnGQjpHijDsRR</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 201(Success).</td><td>created</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>ed7f8206-22ad-4bce-b3d8-83980dc0af5e</blockquote><p><b>name</b>: 1.1.1 Jane authenticates</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Basic</td><td>1.1.1</td><td>GET /oauth/token</td><td>json</td><td>true</td><td>GET</td><td>/oauth/token</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>93751460-d513-4b6c-bcc1-1239227c725f</blockquote><p><b>name</b>: 1.1.1 Jane tries to access her own records</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Binary</td><td>1.1.1</td><td>GET /baseR4/Patient/6kKu6iPnJtMozpaBp</td><td>json</td><td>true</td><td>GET</td><td>/baseR4/Patient/6kKu6iPnJtMozpaBp</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>f93da593-133a-4ab5-9a15-6919a9646e2d</blockquote><p><b>name</b>: 1.1.1 Jane logs out</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>OAuth</td><td>1.1.1</td><td>POST /authorizations/revoke</td><td>json</td><td>true</td><td>POST</td><td>/authorizations/revoke</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>f5e23c2f-3b0a-4994-a5e2-26ee6598cfdb</blockquote><p><b>name</b>: 1.2.1 Katie Klepto authenticates</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Basic</td><td>1.1.1</td><td>GET /oauth/token</td><td>json</td><td>true</td><td>GET</td><td>/oauth/token</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>417b8dd4-082b-44a7-8642-7ce48193f5bd</blockquote><p><b>name</b>: 1.2.2 Katie Klepto tries to access her own records</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Binary</td><td>1.1.1</td><td>GET /baseR4/Patient/qirz9TRTPfkDgBSs8</td><td>json</td><td>true</td><td>GET</td><td>/baseR4/Patient/qirz9TRTPfkDgBSs8</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>8ddcbc24-563a-490e-b902-ee28e720ed41</blockquote><p><b>name</b>: 1.2.3 Katie Klepto tries to access Jane's records</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Binary</td><td>1.1.1</td><td>GET /baseR4/Patient/6kKu6iPnJtMozpaBp</td><td>json</td><td>true</td><td>GET</td><td>/baseR4/Patient/6kKu6iPnJtMozpaBp</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>bad</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>125fc5fe-6165-4085-bb71-9cf34fb3f174</blockquote><p><b>name</b>: 1.2.4 Katie Klepto logs out</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>OAuth</td><td>1.1.1</td><td>POST /authorizations/revoke</td><td>json</td><td>true</td><td>POST</td><td>/authorizations/revoke</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>bd6d83d9-0a6f-47c2-a39e-e393fa1cac54</blockquote><p><b>name</b>: 1.3.1 Susan Social authenticates</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Basic</td><td>1.1.1</td><td>GET /oauth/token</td><td>json</td><td>true</td><td>GET</td><td>/oauth/token</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>19f22d84-4715-4bf8-8c96-35586ac19d66</blockquote><p><b>name</b>: 1.3.2 Susan Social accesses Katie's chart</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Binary</td><td>1.1.1</td><td>GET /baseR4/Patient/qirz9TRTPfkDgBSs8</td><td>json</td><td>true</td><td>GET</td><td>/baseR4/Patient/qirz9TRTPfkDgBSs8</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>fcacd7d3-190e-4565-93e2-a4c2ff0123a2</blockquote><p><b>name</b>: 1.3.3 Susan Social accesses Jane's chart</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>Binary</td><td>1.1.1</td><td>GET /baseR4/Patient/6kKu6iPnJtMozpaBp</td><td>json</td><td>true</td><td>GET</td><td>/baseR4/Patient/6kKu6iPnJtMozpaBp</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>bad</td><td>false</td></tr></table></blockquote></blockquote><blockquote><p><b>test</b></p><blockquote><p><b>id</b></p>568eb07e-6c81-48e7-b8e6-79c01f103061</blockquote><p><b>name</b>: 1.2.4 Susan Social logs out</p><blockquote><p><b>action</b></p><h3>Operations</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Type</b></td><td><b>Resource</b></td><td><b>Label</b></td><td><b>Description</b></td><td><b>Accept</b></td><td><b>EncodeRequestUrl</b></td><td><b>Method</b></td><td><b>Url</b></td></tr><tr><td style="display: none">*</td><td><a href="http://terminology.hl7.org/6.0.2/CodeSystem-testscript-operation-codes.html#testscript-operation-codes-read">Test script operation code</a> read: Read</td><td>OAuth</td><td>1.1.1</td><td>POST /authorizations/revoke</td><td>json</td><td>true</td><td>POST</td><td>/authorizations/revoke</td></tr></table></blockquote><blockquote><p><b>action</b></p><h3>Asserts</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Description</b></td><td><b>Response</b></td><td><b>WarningOnly</b></td></tr><tr><td style="display: none">*</td><td>Confirm that the returned HTTP status is 200(OK).</td><td>okay</td><td>false</td></tr></table></blockquote></blockquote></div>
  </text>
  <url value="http://"/>
  <version value="0.2.2"/>
  <name value="Scenario 2C"/>
  <title value="R4 TestScript - PHI System - Patient Multi-User Access"/>
  <status value="draft"/>
  <date value="2022-06-14T23:19:30.696Z"/>
  <publisher value="MITRE"/>
  <contact>
    <name value="MITRE"/>
    <telecom>
      <system value="url"/>
      <value value="https://www.mitre.org"/>
    </telecom>
  </contact>
  <fixture id="73594318-988d-5647-b3d8-1f1841578c27">
    <autocreate value="true"/>
    <autodelete value="true"/>
    <resource>
      <reference value="PharmLoc2"/>
      <type value="Location"/>
      <display value="OrgA CT Location 2"/>
    </resource>
  </fixture>
  <test id="3823df50-2a7e-48e7-8f70-921067974a05">
    <name value="0.1 Create hospital organization"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="update"/>
        </type>
        <resource value="Organization"/>
        <label value="Hospital Organization"/>
        <description value="PUT /baseR4/Organization/J4aabjHFaXv73ZvME"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="put"/>
        <url value="/baseR4/Organization/J4aabjHFaXv73ZvME"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 201(Success)."/>
        <response value="created"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="80ca8957-a591-4a3c-835e-7018bf03660b">
    <name value="0.2  Create Jane Doe patient"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="update"/>
        </type>
        <resource value="Patient"/>
        <label value="Jane Doe - Patient"/>
        <description value="PUT /baseR4/Patient/6kKu6iPnJtMozpaBp"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="put"/>
        <url value="/baseR4/Patient/6kKu6iPnJtMozpaBp"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 201(Success)."/>
        <response value="created"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="ef27765c-a138-5669-b255-17bb91d30cc0">
    <name value="0.3 Create Katie Klepto patient"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="update"/>
        </type>
        <resource value="Patient"/>
        <label value="Katie Klepto"/>
        <description value="PUT /baseR4/Patient/qirz9TRTPfkDgBSs8"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="put"/>
        <url value="/baseR4/Patient/qirz9TRTPfkDgBSs8"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 201(Success)."/>
        <response value="created"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="ed7f8206-22ad-4bce-b3d8-83980dc0af5e">
    <name value="0.5 Create Susan social worker"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="update"/>
        </type>
        <resource value="Practitioner"/>
        <label value="Susan Social"/>
        <description value="PUT /baseR4/Practitioner"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="put"/>
        <url value="/baseR4/Practitioner"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 201(Success)."/>
        <response value="created"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="309ca261-92bf-5063-ba69-77f29c52c671">
    <name value="0.6 Create consent records on accessing patient data."/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="update"/>
        </type>
        <label value="Restriction on accessing other patients data"/>
        <description value="PUT /baseR4/Consent/cotkDnGQjpHijDsRR"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="put"/>
        <url value="/baseR4/Consent/cotkDnGQjpHijDsRR"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 201(Success)."/>
        <response value="created"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="ed7f8206-22ad-4bce-b3d8-83980dc0af5e">
    <name value="1.1.1 Jane authenticates"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Basic"/>
        <label value="1.1.1"/>
        <description value="GET /oauth/token"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/oauth/token"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="93751460-d513-4b6c-bcc1-1239227c725f">
    <name value="1.1.1 Jane tries to access her own records"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Binary"/>
        <label value="1.1.1"/>
        <description value="GET /baseR4/Patient/6kKu6iPnJtMozpaBp"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/baseR4/Patient/6kKu6iPnJtMozpaBp"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="f93da593-133a-4ab5-9a15-6919a9646e2d">
    <name value="1.1.1 Jane logs out"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="OAuth"/>
        <label value="1.1.1"/>
        <description value="POST /authorizations/revoke"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="post"/>
        <url value="/authorizations/revoke"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="f5e23c2f-3b0a-4994-a5e2-26ee6598cfdb">
    <name value="1.2.1 Katie Klepto authenticates"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Basic"/>
        <label value="1.1.1"/>
        <description value="GET /oauth/token"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/oauth/token"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="417b8dd4-082b-44a7-8642-7ce48193f5bd">
    <name value="1.2.2 Katie Klepto tries to access her own records"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Binary"/>
        <label value="1.1.1"/>
        <description value="GET /baseR4/Patient/qirz9TRTPfkDgBSs8"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/baseR4/Patient/qirz9TRTPfkDgBSs8"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="8ddcbc24-563a-490e-b902-ee28e720ed41">
    <name value="1.2.3 Katie Klepto tries to access Jane's records"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Binary"/>
        <label value="1.1.1"/>
        <description value="GET /baseR4/Patient/6kKu6iPnJtMozpaBp"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/baseR4/Patient/6kKu6iPnJtMozpaBp"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="bad"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="125fc5fe-6165-4085-bb71-9cf34fb3f174">
    <name value="1.2.4 Katie Klepto logs out"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="OAuth"/>
        <label value="1.1.1"/>
        <description value="POST /authorizations/revoke"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="post"/>
        <url value="/authorizations/revoke"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="bd6d83d9-0a6f-47c2-a39e-e393fa1cac54">
    <name value="1.3.1 Susan Social authenticates"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Basic"/>
        <label value="1.1.1"/>
        <description value="GET /oauth/token"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/oauth/token"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="19f22d84-4715-4bf8-8c96-35586ac19d66">
    <name value="1.3.2 Susan Social accesses Katie's chart"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Binary"/>
        <label value="1.1.1"/>
        <description value="GET /baseR4/Patient/qirz9TRTPfkDgBSs8"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/baseR4/Patient/qirz9TRTPfkDgBSs8"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="fcacd7d3-190e-4565-93e2-a4c2ff0123a2">
    <name value="1.3.3 Susan Social accesses Jane's chart"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="Binary"/>
        <label value="1.1.1"/>
        <description value="GET /baseR4/Patient/6kKu6iPnJtMozpaBp"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="get"/>
        <url value="/baseR4/Patient/6kKu6iPnJtMozpaBp"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="bad"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
  <test id="568eb07e-6c81-48e7-b8e6-79c01f103061">
    <name value="1.2.4 Susan Social logs out"/>
    <action>
      <operation>
        <type>
          <system
                  value="http://terminology.hl7.org/CodeSystem/testscript-operation-codes"/>
          <code value="read"/>
        </type>
        <resource value="OAuth"/>
        <label value="1.1.1"/>
        <description value="POST /authorizations/revoke"/>
        <accept value="json"/>
        <encodeRequestUrl value="true"/>
        <method value="post"/>
        <url value="/authorizations/revoke"/>
      </operation>
    </action>
    <action>
      <assert>
        <description
                     value="Confirm that the returned HTTP status is 200(OK)."/>
        <response value="okay"/>
        <warningOnly value="false"/>
      </assert>
    </action>
  </test>
</TestScript>