HL7 / data-access-policies

Play-space for some new IG work that may or may not eventually become a FHIR spec
Other
3 stars 0 forks source link

Provider Directory with different Permissions for given search purpose #31

Closed JohnMoehrke closed 3 months ago

JohnMoehrke commented 4 months ago

Show how a Permission can support multiple use-cases with different needs searching a Practitioner directory, resulting in SUBSETTED Practitioner resources. The following is an example, and not a recommendation. Physical isolation of these various kinds of data is likely safer from accidental risk of exposure. The purpose of this scenario is to show off and exercise the capability of Permission.

Given an organizations provider directory contains comprehensive information (note that this includes clinicians, dieticians, registration clerks, billing clerks, and all other kinds of workers, including comfort dogs. There is a well-established and used structural code to differentiate the various kinds of practitioners. This also includes all the details about the employee that may be needed by anyone including HR, thus home phone numbers and addresses, work phone numbers and addresses. When an internal clinician searches, they will get all clinicians internal allowed data (not personal home address, or personal phone number) When a patient searches, they will get only name and structural role (not phone, address, or functional roles) When an admin searches, they will get all the data with no subsetting, so that they can do updates.