Org Web Adapter

Editing pages/mmpy_255_allow_compliance_holds_to_be_created_via_api.org

:PROPERTIES:
:ID:       de19eb35-e3e7-44e5-8e87-fb6be93114ad
:END:
#+title: MMPY-255 Allow compliance holds to be created via API
#+filetags: :project:

- source :: https://multimediallc.atlassian.net/browse/MMPY-252
- epic :: [[id:88adb9ec-ab52-4d87-8625-6cf72d01612c][MMPY-198 Compliance Holds, Fraud Holds, and Banned Payees]]
- tags ::  [[id:4b532967-a1d9-45f4-b1f0-9a02ad540ff0][Falcon Nest Project Story]] [[id:7c3bbb4e-d079-42c4-992c-3e76210911f4][Falcon Nest Project]]
- status ::  [[id:4d41d978-e56f-45c1-88d1-e2c76510972e][Status - Complete]]
- pull :: https://github.com/multimediallc/mm-pay-internal/pull/333

* Description

In order to support an integration between payouts and the compliance tool, allow holds to be created via API.

* Requirements

** DONE Add tests for hold create via API :holds:api:mmpy255:work:feature:multimediallc:
:PROPERTIES:
:ID:       ff809ed0-3bf1-cba3-410e-05884e2ef3b4
:END:
** DONE Rebase PR on main and clean up PR review comments :holds:api:mmpy255:mmpy198:work:feature:multimediallc:
:PROPERTIES:
:ID:       00d7b907-9ffb-025f-32c0-edcd76b8847b
:END:
<2025-08-15 Fri>

- Note taken on [2025-08-20 Wed 14:48]

Today's work is mostly making sure the application_user_id is used in the endpoint, not the application_user.id, which is different.
** DONE Add creation of user if a valid ID is sent but no user found :holds:api:mmpy255:mmpy198:work:feature:multimediallc:
:PROPERTIES:
:ID:       6d4abfb5-3ba6-bdf2-62ac-806073275065
:END:
** TODO

** DONE Clean up merge with main branch :holds:api:mmpy255:mmpy198:work:feature:multimediallc:merge:
:PROPERTIES:
:ID:       38877a97-7027-ea38-feca-a18ec82718e3
:END:
** TODO

** DONE Address PR issues :holds:api:mmpy255:mmpy198:work:feature:multimediallc:
:PROPERTIES:
:ID:       0a5dc4da-285c-05b2-17a0-bba2152eeb75
:END:
** DONE Fix tests :holds:api:mmpy255:mmpy198:work:feature:multimediallc:
:PROPERTIES:
:ID:       01c055e1-fc84-801a-7697-8dc96df06ce7
:END:
** GIVEN

An admin scoped API request

** WHEN

A compliance hold is GET is submitted for a specific user ID

** THEN

Return the following:
  - Created by - username
  - Created at
  - The user the hold is for - ID
  - The description
  - Removed by

Removed at

Any notes