On 2009-11-07, at 10:04 AM, Sebastian Hilbert wrote:
requirement:
Enter some information to be identified as “confidential,” for
example, that
the patient had once been a victim of domestic violence, into the
chart and
designate as accessible only to Physician Users.
...
This is handled at database level already ,isn't it ?
This exists in the table clin.health_issue as boolean field
is_confidential
Karsten, if the affected row were to be refused access permissions
to the class of user who is not doctor, how would this interest with
the current GUI?
- would there be an error?
- would the query need modifying so that the WHERE would take into
account the privileges and, for low-privilege users, exclude
is_confidential from the listing?