Short Description
The purpose of this test is to add a new Policy to the Policy Repository with PPQ-3 and PPQ-4 transactions.
Goal
This test verifies the required steps for a Policy Source to add a Policy to the Policy Repository
Tested Components
- Policy Source
- Policy Repository
Prerequisite
The Mobile Privacy Policy Feed needs TLS for the communication. Make sure that this option is set in your configuration for Proxy.
- You SHALL have a partner to perform this test.
- You can find samples of PPQm consents here.
- Bundles and consents have to be compliant with these implementation guides :
The PPQ-3/4 transactions SHALL provide IUA Token (ITI-72) for user authentication and authorization and SHALL record the events using ATX:FHIR Feed option (RESTful).
Description
The Policy Source sends a Consent (PPQ-3) and a Bundle (PPQ-4) to the Policy Repository. These requests are used to add policies in the Policy Repository.
Evidence
The Policy Source shall present the following evidence:
- The Policy Source sends a Consent feed request to the Policy Repository of the community.
- The Consent feed request must add a new policy in the Policy Repository of its community.
- The PPQ-3 response must be consistent with a success message.
- The Policy Source sends a Consent Bundle feed request to the Policy Repository of the community.
- The Consent Bundle feed request must add at least a new policy in the Policy Repository of its community.
- The PPQ-4 Bundle response must be consistent with a success message.
- All the messages exchanged shall be validated in EVSClient.
Evaluation
In order to verify the test the Connectathon monitor will ask for the queries and responses of the PPQ-3/4 requests and responses.