Consent Administration Service SHOULD return OperationOutcome with details of which business rules did not allow an operation to be successful if an HTTP status code of 4xx or 5xx is returned

Consent Administration Service MAY return OperationOutcome for a successful operation<br/><br/>- Right now, linking to each transaction. But rather than link many generic requirements to every transaction, should I create generic tests that each transaction uses? • For now, no, but consider iterating into this. Once everything traces, can consider refactoring traces. • An argument for doing this: every time we add a new transaction, we need to add those traces.

Consent Administration Service SHALL support Consent search

Consent Administration Service SHALL support Consent search by FASTConsentController

Consent Administration Service SHALL support Consent search by date

Consent Administration Service SHALL support Consent search by FASTConsentManager

Consent Administration Service SHALL support Consent search by patient

Consent Administration Service SHALL support Consent search by scope

Consent Administration Service SHALL support Consent search by status

Consent Administration Service SHALL support File Consent operation<br/><br/>Redundant with CapStmt

Consent Administration Service SHALL support Revoke Consent operation<br/><br/>Redundant with CapStmt

Consent Administration Service SHALL support Consent subscriptions (as defined by the FAST Subscription Topic for FHIR R4 with Subscriptions Backport)<br/><br/>Fix: "a consent administration service SHALL support subscriptions to allow other systems to be informed when consents for a patient have changed." - this should be more precise, like "a consent administration service SHALL support subscriptions as defined by the FAST Subscription Topic, e.g. to allow other systems to be informed when consents for a patient have changed."

Consent Administration Service SHALL support AuditEvent search

Consent Administration Service SHALL support AuditEvent search by FASTAuditEventConsent<br/><br/>Need to specify actor(s). For now, assuming CAS SHALL support and Consent Client MAY support

Consent Administration Service SHALL support AuditEvent search by patient<br/><br/>Need to specify actor(s). For now, assuming CAS SHALL support and Consent Client MAY support