ehealthsuisse / ch-epr-ppqm

PPQ für mobile apps
1 stars 2 forks source link

PPQm Policy Set Template ID issues #21

Closed qligier closed 1 year ago

qligier commented 1 year ago

Can we link to https://github.com/ehealthsuisse/ch-epr-adr-ppq/tree/main/Privacy%20Policy%20Stack/Patient%20Specific%20via%20Policy%20Manager from the value set page for reference?

The templates are not described anywhere, their use is quite confusing at first. A link to the description in Annex 5, 2.1 could be enough.

Why are numbers used instead of their actual identifier? E.g. 201 is actually urn:uuid:e693657c-50be-46a6-bdcd-05269147f357, and is referenced as such in XACML.

unixoid commented 1 year ago

urn:uuid:e693657c-50be-46a6-bdcd-05269147f357 is a sample identifier of the policy set, its counterpart in the PPQm example is urn:uuid:57ab9b0d-7d97-4d85-9e4b-02bc7c939ad9. 201 is a template ID and present only in FHIR resources, not in XACML.

qligier commented 1 year ago

Hmm okay, they are not the same template instances. But then I have troubles understanding the use of templates. They seem to be more than simple examples because you can link them in Consent, but they are not true policies like Base Policies/Base Policy Sets.

unixoid commented 1 year ago

Templates are not examples, they are literally templates, i.e. to be filled with actual data. Please see Section 4.2 in Amendment 2.1 of Annex 5:

The CH:PPQ Policy Source SHALL create Patient Policies from the template policies by setting actual data (e.g. EPR-SPIDs of patients or references to Base Policy Sets) and generate policy set IDs as UUIDs.

See also:

dkotlaris commented 1 year ago

26.10.2023: Accepted.