Closed simonvadee closed 2 years ago
SearchNarrowing interceptor only applies to search operations, not GET/POST/PUT/DELETE not custom operations (eg: $regex)
https://demo.arkhn.com/hapi/fhir/Patient/c7d4bc48-3d37-5165-b079-d865ecf3653d lol
instance-level operations must behave the same as search operations
Implement AuthorizationInterceptor https://hapifhir.io/hapi-fhir/docs/security/authorization_interceptor.html
also, adapt configuration to be able to easily disable auth mechanism
deprecated
Description
SearchNarrowing interceptor only applies to search operations, not GET/POST/PUT/DELETE not custom operations (eg: $regex)
Reproduction
https://demo.arkhn.com/hapi/fhir/Patient/c7d4bc48-3d37-5165-b079-d865ecf3653d lol
Expectation
instance-level operations must behave the same as search operations
Resolution
Implement AuthorizationInterceptor https://hapifhir.io/hapi-fhir/docs/security/authorization_interceptor.html