Missing definition of 'request'

[jkiddo]

ITI.BasicAudit/input/fsh/PatientQuery.fsh

Line 11 in 6b858fc

- And the request does not have a Patient subject indicated

lacks definition of how something is indicated/NOT indicated. If the scoping of the request is not part of the Query parameter but instead scoped as part of the JWT that is part of the header then it is left unclear whether the request is considerd scoped or not, as there is no clear definition of what a 'request' is.

[JohnMoehrke]

so recognize that a query might be scoped to an individual identified patient not by query parameters, but by security token restrictions. For example using SMART patient scoped token restricts results to that patient. Thus explain that the patient scope is not limited to only search parameters or what is commonly seen as http request parameters; but also has other factors such as security token.