[NRL-1290] Allow bars proxy to create and update appointments for any org

Author: mattdean3-nhs

api/producer/createDocumentReference/create_document_reference.py

@@ -64,6 +64,11 @@ def _check_permissions(
     """
     Check the requester has permissions to create the DocumentReference
     """
+
+    # Allow BARS proxy to create a document reference for any organisation
+    if metadata.ods_code == "V4TOL" and core_model.type in metadata.pointer_types:
+        return
+
     custodian_parts = tuple(
         filter(None, (core_model.custodian, core_model.custodian_suffix))
     )

api/producer/updateDocumentReference/update_document_reference.py

@@ -3,6 +3,7 @@
 from pydantic import ValidationError
 
 from nrlf.core.codes import SpineErrorConcept
+from nrlf.core.constants import PointerTypes
 from nrlf.core.decorators import DocumentPointerRepository, request_handler
 from nrlf.core.dynamodb.model import DocumentPointer
 from nrlf.core.errors import OperationOutcomeError
@@ -61,7 +62,17 @@ def handler(
 
     core_model = DocumentPointer.from_document_reference(document_reference)
 
-    if metadata.ods_code_parts != tuple(core_model.producer_id.split("|")):
+    if (
+        metadata.ods_code == "V4TOL"
+        and core_model.type.coding[0].code == PointerTypes.APPOINTMENT.coding_value()
+    ):
+        # If bars app - don't validate the ods code against the pointer
+        logger.log(
+            LogReference.PROUPDATE002,
+            msg="Allowing bars to update pointer",
+            pointer_id=core_model.id,
+        )
+    elif metadata.ods_code_parts != tuple(core_model.producer_id.split("|")):
         logger.log(
             LogReference.PROUPDATE004,
             metadata_ods_code_parts=metadata.ods_code_parts,