This happens with every scopes:
- nvi:localize
- nvi:create
- nvi:read
- nvi:delete
url:
https://nvi.test.gf.irealisatie.nl/v0.2/api/fhir
request body (id in the url is just random UUID):
{
"resourceType": "Bundle",
"id": "8056af80-b381-4acb-a132-0ef19bdc5b1e",
"total": 1,
"entry": [
{
"request": {
"method": "DELETE",
"url": "List/1edc96d4-c84a-46f7-9c5d-a3118cb9966a"
}
}
],
"type": "transaction"
}
response status:
200 (but in the body it's 500)
body:
{
"resourceType": "Bundle",
"type": "searchset",
"entry": [
{
"response": {
"status": "500",
"outcome": {
"resourceType": "OperationOutcome",
"issue": [
{
"severity": "error",
"code": "error",
"details": {
"text": "Bundle.entry.0: Record not found"
}
}
]
}
}
}
]
}
What I expected:
- With an invalid scope: 200 response (403 inside the body for the DELETE)
- With a valid scope(nvi:delete): 200 response (404 inside the body for DELETE because the record is not found)
This happens with every scopes:
url:
https://nvi.test.gf.irealisatie.nl/v0.2/api/fhir
request body (id in the url is just random UUID):
response status:
200(but in the body it's 500)body:
What I expected: