Medication Dispense API reference · mansoq-core-teleicu

Declared route and availability

This resource is declared in mansoq-core-teleicu at /api/v1/medication/dispense/. verified core mount in config/urls.py This is an alternative core contract, not proof that the primary core uses the same behavior. A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

list · GET

GET /api/v1/medication/dispense/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

response: MedicationDispenseReadSpec. Declared fields below; inherited fields are retained in the schema inventory.

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses.

create · POST

POST /api/v1/medication/dispense/ — action create. static contract extracted; runtime/permission/payload behavior review pending.

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: MedicationDispenseWriteSpec. Declared fields below; inherited fields are retained in the schema inventory.

response: MedicationDispenseRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter, can_write_location_medication_dispense. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses; PermissionDenied: You do not have permission to write medication dispenses; ValidationError: No updates allowed on cancelled medication dispense; ValidationError: Inventory item does not have enough stock.

retrieve · GET

GET /api/v1/medication/dispense/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

response: MedicationDispenseRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispense; PermissionDenied: You do not have permission to read medication dispenses.

update · PUT

PUT /api/v1/medication/dispense/{external_id}/ — action update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: MedicationDispenseUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

response: MedicationDispenseRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter, can_write_location_medication_dispense. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses; PermissionDenied: You do not have permission to write medication dispenses; ValidationError: No updates allowed on cancelled medication dispense.

partial_update · PATCH

PATCH /api/v1/medication/dispense/{external_id}/ — action partial_update. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

request: MedicationDispenseUpdateSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

response: MedicationDispenseRetrieveSpec. Declared fields below; inherited fields are retained in the schema inventory.

The declared field table is shown at its first occurrence in this reference; this operation links the same schema.

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses; ValidationError: No updates allowed on cancelled medication dispense.

upsert · POST

POST /api/v1/medication/dispense/upsert/ — action upsert. static contract extracted; runtime/permission/payload behavior review pending.

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter, can_write_location_medication_dispense. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: 400. Other branches/framework exception handling may differ.

Declared refusal/error evidence: RestFrameworkValidationError: Invalid request data; RestFrameworkValidationError: No datapoints provided; RestFrameworkValidationError: Too many datapoints provided; ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses; ValidationError: No updates allowed on cancelled medication dispense; ValidationError: Inventory item does not have enough stock; PermissionDenied: You do not have permission to write medication dispenses.

Conditional gates: conditional/computed expression; inspect pinned declaration comparison settings.MAX_DATAPOINTS_PER_UPSERT.

summary · GET

GET /api/v1/medication/dispense/summary/ — action summary. static contract extracted; runtime/permission/payload behavior review pending.

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_list_location_medication_dispense, can_view_medication_dispense_for_encounter. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError: Location or encounter is required; PermissionDenied: You do not have permission to read medication dispenses.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.