Support for lookup of email address and mobile number for given person or organisation

[SandGrainOne]

Description

The Notification component should be able to identify an email address and/or mobile number when the intended recipient of a notification is a person or organization.

1. The profile lookup should occur at the time when the notification is to be sent.
2. There should also be a lookup with the placement of the order in order to give feedback about the likely outcome.
3. It should be unnecessary to do a lookup if the notification already have a target with an address.
4. The lookup is done only if the Notification.PartyReference is filled in with an (SSN - National Identity Number) or organization number.

Other issues will cover lookup based on other values and properties like InstanceId.

Workflows

The work is split into workflows. Completing a single workflow should add new value or introduce a new feature in Altinn Notifications. The workflows are placed in the order of development and functionality that is reused by a later workflow only needs to be specified once by the workflow that first implements the functionality.

Send notification to person identified with national identity number

Altinn's responsibility:

• Lookup contact point in Altinn's copy of KRR.
• Consider reservation in KRR
  • Recipient has no reservations => send notification
  • Recipient has reservation & app owner has bypassed => send notifications
  • Recipient has reservation & app owner has NOT bypassed => return error message to application owner

App owner responsibility:

• Provide national identity number of recipient
• State whether sending notification should bypass reservations in KRR

Tasks

Preview Give feedback

1. Add national identity number to Recipient model #436
   +0
   
2. Expand current user profile with Reservation altinn-profile#132
   +0
   
3. Implement endpoints for exposing address points and reservation info in Altinn Profile altinn-profile#136
   +0
   
4. Ensure that address source is registered so that we can report on where we found an address #446
   +0
5. Add logic for generating notifications from national identity number #437
   +0
6. Add support for sending notification to a national identity number #439
   +0
7. Regression and use case tests - NIN lookup #441
   +0
   
8. Add national identity- and organization number lookup to localtest #496
   +0
9. Send notification to national identity number user docs altinn-studio-docs#1546
   +0

Support notification to organization by organization number without service affiliation

Altinn's responsibility:

• Lookup organization contact point in Altinn's copy of KoFuVi
  - Lookup user contact point in Altinn Profil (din kontaktinformasjon for virksomhet)

App owner responsibility:

• Provide organization number of recipient

Requirements

• Fall back to main unit if sub unit doesn't have contact information
• Separate endpoints for official and personal contact information on the organization
• Make it possible to filter contact information based on any resource registered in resource registry.

Questions

Authorization of access to the resource that the notification is about

• What if different people have read access to different steps in the process?
• How to handle those cases?
• Do we need to?
• What if the policy have completely different actions? (Not read)

Tasks

Preview Give feedback

1. Create a new endpoint for contact information of an organisation in SblBridge #442
   +0
2. Add logic to search for contact details of main unit when there are none on a sub unit #455
   +0
3. Dependency on issue Add national identity number to Recipient model #436
4. Dependency on issue Ensure that address source is registered so that we can report on where we found an address #446
5. Altinn 3 endpoint for official contact information for organisation in Register #450
   +0
   
6. Add logic for generating notifications based on organisation number #456
   +0
   
7. Regression and use case tests - OrgNo lookup #507
   +0
8. Add an implementation guide for sending notifications without app affiliation to an organisation #511
   +0
   
9. Add functionality to localtest Add national identity- and organization number lookup to localtest  #496

Workflow: Support notification to organization by organization number with service affiliation

Altinn's responsibility:

• Lookup organization contact point in Altinn's copy of KoFuVi
• Lookup user contact point in Altinn Profil (din kontaktinformasjon for virksomhet)
  • contact point is only retrieved for user's that satisfy the following:
    • User can represent the organization
    • User has registered a personal contact point for the organization in Altinn
    • User has access to the affiliated service through a role, access group or direct delegation
    • User has no limitations on which services it should be notified about OR user has whitelisted notifications related to the affiliated service

App owner responsibility:

• Provide organization number of recipient
• Provide resourceId for affiliated service

Tasks

Preview Give feedback

1. Add support for picking Altinn 3 App when adding personal contact information associated with an organisation #470
   +0
   
2. Create a new endpoint for personal contact information for an organization in SblBridge #449
   +0
   
3. Add resource filtering when retrieving personal contact address in SBL #504
   +0
4. Altinn 3 endpoint for personal contact information associated with organisation in Profile #451
   +0
5. Add access based recipient filtering of persons with personal contact information associated with an organsation #472
   +0
   
6. Adjust business logic to accomodate handling notifications with app affiliation to an organization. #508
   +0
   
7. Add regression and use case tests that include an app affiliation #510
   +0
   
8. Add an implementation guide for sending notifications with app affiliation to an organisation #512
   +0
   
9. Do we send notifications to the official contact address if there is a service affiliation with role requirements? YES

Workflow: Support notification to person identified by national identity number with service affiliation

Altinn's responsibility:
Altinn will generate notifications to a person ragardless of resource affiliation. There are currently no feature in Altinn to send notifications to somone else when the recipient of a notification is a person.

• Consider reservation in KRR for each recipient
  • Recipient has no reservations => send notification
  • Recipient has reservation & app owner has bypassed => send notifications
  • Recipient has reservation & app owner has NOT bypassed => return error message to application owner

App owner responsibility:

• Provide national identity number of recipient
• Provide appId for affiliated service
• State whether or not notification should bypass reservations in KRR

Tasks

Preview Give feedback

1. Add business logic to send notifications to recipient identified with national identity number regardless of resource affiliation. #524
   +0
   

[acn-sbuad]

All related issues closed. Closing epic.