TimelineRecords UI

[murugapl]

An endpoint which serves a UI used to view events related to a patient record.

This is a tool designed for use by the Ops Support people, to visualise the patient data without having to use the console.

The information that can be displayed for each 'event' is as follows:

manage-vaccinations-in-schools/lib/timeline_records.rb

Lines 21 to 77 in 730766c

	AVAILABLE_DETAILS_CONFIG = {
	consents: %i[response route updated_at withdrawn_at invalidated_at],
	sessions: %i[location_id slug academic_year],
	triages: %i[status updated_at invalidated_at performed_by_user_id],
	vaccination_records: %i[
	outcome
	performed_at
	updated_at
	discarded_at
	uuid
	session_id
	nhs_immunisations_api_synced_at
	protocol
	source
	],
	cohort_imports: %i[
	csv_filename
	processed_at
	status
	rows_count
	new_record_count
	exact_duplicate_record_count
	changed_record_count
	],
	class_imports: %i[
	csv_filename
	processed_at
	status
	rows_count
	new_record_count
	exact_duplicate_record_count
	changed_record_count
	year_groups
	],
	parents: %i[],
	gillick_assessments: %i[],
	parent_relationships: %i[],
	school_moves: %i[school_id source],
	school_move_log_entries: %i[school_id user_id],
	teams: %i[name],
	changesets: %i[import_id import_type],
	pds_search_results: %i[step]
	}.freeze
	AVAILABLE_DETAILS_CONFIG_PII = {
	parents: %i[full_name email phone],
	gillick_assessments: %i[
	knows_vaccination
	knows_disease
	knows_consequences
	knows_delivery
	knows_side_effects
	],
	parent_relationships: %i[type other_name],
	changesets: %i[uploaded_nhs_number pds_nhs_number],
	pds_search_results: %i[nhs_number]
	}.freeze

And the following audited changes are allowed:

manage-vaccinations-in-schools/lib/timeline_records.rb

Lines 89 to 133 in 730766c

	ALLOWED_AUDITED_CHANGES = %i[
	patient_id
	session_id
	location_id
	programme_id
	vaccine_id
	organisation_id
	team_id
	school_id
	gp_practice_id
	uploaded_by_user_id
	performed_by_user_id
	user_id
	parent_id
	status
	outcome
	response
	route
	date_of_death_recorded_at
	restricted_at
	invalidated_at
	withdrawn_at
	rows_count
	year_groups
	home_educated
	source
	].freeze
	ALLOWED_AUDITED_CHANGES_PII = %i[
	full_name
	email
	phone
	nhs_number
	given_name
	family_name
	gender_code
	date_of_birth
	address_line_1
	address_line_2
	address_town
	address_postcode
	updated_from_pds_at
	date_of_death
	pending_changes
	].freeze

These details include PII, but there is a show_pii flag that can be turned off in the controller to remove any identifiable information from the above lists

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
1 Accepted issue

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[misaka]

It looks like we've removed Stimulus from Mavis, probably since this was originally written (see b66c0f4). Not a show-stopper, but it would be nice to see if we can get this functionality back, although I suspect NHSUK won't support it directly so we'll have to bring Stimulus back.

[misaka]

Is there a reason this isn't in app/lib? It feels like it should be to me.

[misaka]

There's a couple things I think we should sort, but it's more important now to just get this PR in. 🚀