Create Redline for OIPC Review

* As an IAO analyst
* I want to create a redline package for OIPC review that has any section 14 information redacted
* so that I can download a redlined copy and send records to the Office of the Information and Privacy Commissioner (OIPC)
* and be in compliance with government policy

**Assumptions & Scope**
This ticket reflects a new type of response package that can be created when an OIPC review layer has been added. the user must be on the OIPC review layer to have this option.

Other types of response packages will remain the same, and follow existing rules (Eg - Redline for Ministry Sign-Off and Response package for applicant.

What is IN scope?
New Option for Creating a Type of Response Package - Redline for OIPC

What is NOT in scope?
OIPC complaints such as:

- A failure to make a reasonable effort to assist.
- A failure to respond on time (deemed refusal).
- An inadequate search for records in response to a request for records.
- An inappropriate fee assessment.
- A refusal to waive an assessed fee.
- An unauthorised extension of the public body's time to respond to an access request.

**Acceptance Criteria**

**Scenario 1: Creating an OIPC Review Layer**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* AND the request is Closed
* AND the request has an OIPC flag
* AND the response package has been created
* WHEN They select the review layer drop-down option from the left hand menu
* THEN there will be an option named "OIPC".

*Scenario 2: Creating an OIPC Review Layer**
* GIVEN An IAO analyst is on a request
* AND the request is NOT Closed
* AND the request has an NOT OIPC flag
* AND the response package has NOT been created
* WHEN They select the review layer drop-down option from the left hand menu
* THEN there will be NO option named "OIPC".

**Scenario 3: Adding an OIPC Review Layer**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN They select the review layer "OIPC" from the drop-down option
* THEN a new review layer will be applied called "OIPC".

**Scenario 4: Not adding an OIPC Review Layer**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN They select the review layer "OIPC" from the drop-down option
* AND then click out of the menu option
* THEN the review layer menu options will close
* AND no review layer will have been applied.

**Scenario 5: Copying severing from Redline to OIPC Review Layer**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN They select the review layer "OIPC" from the drop-down option
* AND choose to apply the "OIPC" layer
* THEN the "OIPC" layer will show
* AND all redaction boxes drawn on the redline, and page flags applied will be available in the new layer.

**Scenario 6: Changing severing on OIPC Layer**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN An "OIPC" layer has been applied
* THEN the redaction boxes from the redline will be active
* AND the redaction boxes can be edited, resized, changed by another user, etc.
* AND the redaction boxes can be deleted
* AND new redaction boxes can be added
* AND the original Redline layer will not be altered.

**Scenario 7: Preparing an OIPC Review Layer to send to the OIPC**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN An "OIPC" layer has been applied
* AND the create records package drop down menu has been activated
* AND the analyst has chosen the "Redline for OIPC" option
* THEN the analyst will be able to download a redline from the OIPC review layer
* AND the options will be Yes or Cancel

**Scenario 8: Preparing an OIPC Review Layer to send to the OIPC that contains s.14**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN An "OIPC" layer has been applied
* AND the option to create "Redline for OIPC" has been selected
* AND the OIPC layer contains information redacted under s. 14
* THEN a modal will be displayed asking the analyst to confirm they want to create the "Redline for OIPC"
* AND the options will be Yes or Cancel

**Scenario 9: Creating OIPC Review Package**
* GIVEN An IAO analyst is on the create "Redline for OIPC" modal
* WHEN they select yes
* THEN the modal will close
* AND all redaction boxes with s. 14 will appear as redacted
* AND all other previous redaction boxes and FOIPPA sections will appear unredacted.
* AND the OIPC redline will be created and available for download
[s.14 Redacted.pdf](https://api.zenhub.com/attachedFiles/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM0RHQVE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--e0cc6a7f6b14c68d292d0b7c3a1610357871d628/s.14%20Redacted.pdf)

**Scenario 10: Redline locked when OIPC Review Layer created**
* GIVEN An IAO analyst has created a OIPC Review Layer
* WHEN They select the review layer "Redline" from the drop-down option
* THEN a the Redline will be view only
* AND no edits can be made to the Redline

**Scenario 11: No Redline PDF can be created when OIPC Review Layer created**
* GIVEN An IAO analyst has created a OIPC Review Layer
* WHEN they select Create PDF dropdown
* THEN there will no option to create a 'Redline for Signoff'
* AND there will be an option to create a 'OIPC Redline for Signoff'
*

**Scenario 12: Choosing not to prepare an OIPC Review Layer to send to the OIPC**
* GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
* WHEN the option to create records package has been selected
* AND the analyst chooses not to create a "Redline for OIPC"
* THEN the menu option will close
* AND no redline will be produced to download.

**Scenario 13: Cancelling OIPC Review Package**
* GIVEN An IAO analyst is on the create OIPC Redline modal
* WHEN they select cancel
* THEN the modal will close
* AND No action will occur

**Dependencies? What is the impact of this dependency? (If so, link dependency in the ticket, make it visible in a team´s backlog)**

**Validation Rules? (If yes, list here)**

**Design**
@xxx - please link the Design here

**Definition of Ready**

1. [ ] Is there a well articulated User Story?
2. [ ] Is there Acceptance Criteria that covers all scenarios (happy/sad paths)?
3. [ ] If there is a user interface, is there a design?
4. [ ] Does the user story need user research/validation?
5. [ ] Does this User Story needs stakeholder approval?
6. [ ] Design / Solution accepted by Product Owner
7. [ ] Is this user story small enough to be completed in a Sprint? Should it be split?
8. [ ] Are the dependencies known/ understood? (technical, business, regulatory/policy)
9. [ ] Has the story been estimated?

**Definition of Done**

1. [ ] Passes developer unit tests
2. [ ] Passes peer code review
3. [ ] If there's a user interface, passes UX assurance
4. [ ] Passes QA of Acceptance Criteria with verification in Dev and Test
5. [ ] Confirm Test cases built and succeeding
6. [ ] No regression test failures
7. [ ] Test coverage acceptable by Product Owner
8. [ ] Ticket ready to be merged to master or story branch
9. [ ] Developer to list Config changes/ Update documents and designs
10. [ ] Can be demoed in Sprint Review
11. [ ] Tagged as part of a Release
12. [ ] Feature flagged if required
13. [ ] Change Management activities done?