Restrictions alimentaires actives d'un guest (données de santé art.9)

GET

/v1/guests/{id}/dietary

curl --request GET \
  --url https://example.com/v1/guests/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/dietary \
  --header 'X-API-Key: <X-API-Key>'

Retourne les restrictions actives — données de santé RGPD art.9/art.6. RBAC : requiert la permission guest.dietary (receptionist / manager / director). Profil anonymisé → liste vide (RGPD art.17). NE PAS exposer vers OTA/channel/CRM standard.

Authorizations

• ApiKeyAuth
• BearerAuth

Parameters

Path Parameters

id

required

string format: uuid

UUID du profil guest

Responses

200

Restrictions alimentaires actives

Media type application/json

object

data

required

object

restrictions

required

Array<object>

object

id

required

UUID surrogate de la restriction

string format: uuid

typeId

UUID du type du référentiel (null = libellé libre)

string format: uuid

nullable

label

required

Libellé effectif

string

category

required

string

Allowed values: allergen diet_restriction preference

severity

required

string

Allowed values: medical strong preference

status

required

string

Allowed values: active archived

legalBasis

required

string

Allowed values: consent_art9a pending_confirmation

consentId

string format: uuid

nullable

source

required

string

Allowed values: staff guest_self imported third_party

notes

string

nullable

notedAt

required

string format: date-time

notedBy

string format: uuid

nullable

Example

{
  "data": {
    "restrictions": [
      {
        "category": "allergen",
        "severity": "medical",
        "status": "active",
        "legalBasis": "consent_art9a",
        "source": "staff"
      }
    ]
  }
}

403

Permission guest.dietary requise

Media type application/json

object

code

required

Code machine de l’erreur

string

message

required

Message lisible

string

origin

Origine domaine de l’erreur (optionnel)

object

boundedContext

string

module

string

status

required

integer

traceId

required

Identifiant de corrélation pour le support

string

Example

{
  "code": "RESERVATION_NOT_FOUND",
  "message": "Réservation introuvable",
  "status": 404
}

404

Guest introuvable

Media type application/json

object

code

required

Code machine de l’erreur

string

message

required

Message lisible

string

origin

Origine domaine de l’erreur (optionnel)

object

boundedContext

string

module

string

status

required

integer

traceId

required

Identifiant de corrélation pour le support

string

Example

{
  "code": "RESERVATION_NOT_FOUND",
  "message": "Réservation introuvable",
  "status": 404
}