---
search:
  tags:
    - Business controls
    - POST
seo:
  description: >-
    Owner administration or the explicitly assigned business… Reference for the
    POST /api/v1/security/reviews/{id}/complete endpoint in the PharmaFlow API.
sidebar:
  label: POST /reviews/record/complete
  badge: POST
title: POST /reviews/record/complete
type: openapi-operation
---
Owner administration or the explicitly assigned business permission is required. Actions are scoped to the signed-in branch. A request cannot be approved by its creator. Locked sessions return 423.

`POST /api/v1/security/reviews/{id}/complete`

**Request body** (`application/json`, required)

- `reason` (string)
- `payment_method` (string)
- `payment_lines` (object[])
- `confirmed_total` (number, required)
- `reference` (string)

Request body example:

```json
{
  "reason": "",
  "payment_method": "cash",
  "payment_lines": [
    {
      "method": "cash",
      "amount": 1
    }
  ],
  "confirmed_total": 0,
  "reference": ""
}
```

**Responses**

- `200` — Operation completed
- `201` — Record created
- `400` — Invalid request
- `401` — Session expired or revoked
- `403` — Permission denied or self-approval
- `409` — Record changed or no longer actionable
- `423` — Register locked