MANSOQ Backend resource · STATIC DECLARATIONS
Dicom API reference · mansoq-radiology
Static source contract for Dicom: 4 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.
Static API contract — behavior review pending. Source baseline f6e9f05f76d4.
Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.
Declared route and availability
This resource is declared in mansoq-radiology at /api/{installed_plugin_prefix}/dicom/. plugin/local mount; actual prefix and enablement require deployment verification A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.
Operation map
| Method | Path | Action | Evidence |
|---|---|---|---|
| GET | /api/{installed_plugin_prefix}/dicom/authenticate/ |
authenticate | @action declaration |
| POST | /api/{installed_plugin_prefix}/dicom/upload/ |
upload | @action declaration |
| GET | /api/{installed_plugin_prefix}/dicom/studies/ |
get_studies | @action declaration |
| GET | /api/{installed_plugin_prefix}/dicom/service-requests/ |
get_servicerequests | @action declaration |
authenticate · GET
GET /api/{installed_plugin_prefix}/dicom/authenticate/ — action authenticate. static contract extracted; runtime/permission/payload behavior review pending.
Path and deployment-context parameters:
| Location | Parameter | Type | Required |
|---|---|---|---|
| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |
Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.
Explicit response statuses in observed code: 200. Other branches/framework exception handling may differ.
upload · POST
POST /api/{installed_plugin_prefix}/dicom/upload/ — action upload. static contract extracted; runtime/permission/payload behavior review pending.
Path and deployment-context parameters:
| Location | Parameter | Type | Required |
|---|---|---|---|
| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |
Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):
| Location | Field | Declared/inferred read type | Requiredness evidence |
|---|---|---|---|
| file | file |
not declared at read site | not established |
| body | patient_id |
not declared at read site | not established |
Observed authorization checks: can_write_patient_obj. Helper/queryset evidence is included; this is not proof of complete security review.
Explicit response statuses in observed code: 400, 201, 502, 500. Other branches/framework exception handling may differ.
Declared refusal/error evidence: PermissionDenied (dynamic detail; inspect source).
get_studies · GET
GET /api/{installed_plugin_prefix}/dicom/studies/ — action get_studies. static contract extracted; runtime/permission/payload behavior review pending.
Path and deployment-context parameters:
| Location | Parameter | Type | Required |
|---|---|---|---|
| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |
Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):
| Location | Field | Declared/inferred read type | Requiredness evidence |
|---|---|---|---|
| query | patientId |
not declared at read site | not established |
Observed authorization checks: can_view_patient_obj. Helper/queryset evidence is included; this is not proof of complete security review.
Explicit response statuses in observed code: 200. Other branches/framework exception handling may differ.
Declared refusal/error evidence: PermissionDenied (dynamic detail; inspect source).
get_servicerequests · GET
GET /api/{installed_plugin_prefix}/dicom/service-requests/ — action get_servicerequests. static contract extracted; runtime/permission/payload behavior review pending.
Path and deployment-context parameters:
| Location | Parameter | Type | Required |
|---|---|---|---|
| deployment mount | installed_plugin_prefix | deployment-selected mount prefix | true |
Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):
| Location | Field | Declared/inferred read type | Requiredness evidence |
|---|---|---|---|
| query | serviceRequestId |
not declared at read site | not established |
Observed authorization checks: can_write_service_request. Helper/queryset evidence is included; this is not proof of complete security review.
Explicit response statuses in observed code: 200. Other branches/framework exception handling may differ.
Declared refusal/error evidence: PermissionDenied (dynamic detail; inspect source).
Integration review checklist
Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.
Pinned source evidence
Links require access to the private source repository.
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/urls.py:17
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/api/dicom.py:47
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/api/dicom.py:51
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/api/dicom.py:56
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/api/dicom.py:124
- repositories/teleicu/mansoq-radiology/src/mansoq_radiology/api/dicom.py:153