Trent/vigilcare-clinical
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature: RBAC + Clinical Audit Logging

Browse Source
This commit is contained in:
voltsrage
2026-06-21 15:46:55 +08:00
parent a43db52813
commit 5af6ab490e
83 changed files with 4281 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
VigilCareClinicalAPI/Controllers/AlertsController.cs
+9 -2
View File
@@ -1,3 +1,4 @@
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;
@@ -6,6 +7,7 @@ using Microsoft.AspNetCore.Mvc;
/// </summary>
[ApiController]
[Produces("application/json")]
[Authorize]
public class AlertsController : ControllerBase
{
private readonly IAlertService _alerts;
@@ -21,6 +23,7 @@ public class AlertsController : ControllerBase
/// <param name="pageSize">Results per page.</param>
/// <returns>A paginated list of alerts for the encounter.</returns>
[HttpGet("api/v1/encounters/{encounterId:guid}/alerts")]
[AuthorizePermission(ClinicalPermissions.AlertsRead)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status200OK)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status400BadRequest)]
public async Task<IActionResult> ListByEncounter(
@@ -63,6 +66,7 @@ public class AlertsController : ControllerBase
/// <param name="pageSize">Results per page.</param>
/// <returns>A paginated list of alerts.</returns>
[HttpGet("api/v1/alerts")]
[AuthorizePermission(ClinicalPermissions.AlertsRead)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status200OK)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status400BadRequest)]
public async Task<IActionResult> ListGlobal(
@@ -128,6 +132,7 @@ public class AlertsController : ControllerBase
/// <param name="id">Alert id.</param>
/// <returns>The alert record.</returns>
[HttpGet("api/v1/alerts/{id:guid}")]
[AuthorizePermission(ClinicalPermissions.AlertsRead)]
[ProducesResponseType(typeof(ApiResponse<ClinicalAlert>), StatusCodes.Status200OK)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status404NotFound)]
public async Task<IActionResult> Get(Guid id)
@@ -140,9 +145,10 @@ public class AlertsController : ControllerBase
/// Acknowledges an open or escalated alert and emits an outbox event for downstream consumers.
/// </summary>
/// <param name="id">Alert id.</param>
/// <param name="req">Clinician id and optional note.</param>
/// <param name="req">Optional acknowledgment note.</param>
/// <returns>The updated alert.</returns>
[HttpPost("api/v1/alerts/{id:guid}/acknowledge")]
[AuthorizePermission(ClinicalPermissions.AlertsAcknowledge)]
[ProducesResponseType(typeof(ApiResponse<ClinicalAlert>), StatusCodes.Status200OK)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status404NotFound)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status409Conflict)]
@@ -158,6 +164,7 @@ public class AlertsController : ControllerBase
/// <param name="id">Alert id.</param>
/// <returns>The updated alert.</returns>
[HttpPost("api/v1/alerts/{id:guid}/resolve")]
[AuthorizePermission(ClinicalPermissions.AlertsResolve)]
[ProducesResponseType(typeof(ApiResponse<ClinicalAlert>), StatusCodes.Status200OK)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status404NotFound)]
[ProducesResponseType(typeof(ApiResponse<object>), StatusCodes.Status409Conflict)]
@@ -166,4 +173,4 @@ public class AlertsController : ControllerBase
var alert = await _alerts.ResolveAsync(id);
return Ok(ApiResponse<ClinicalAlert>.Ok(alert));
}
}
}