[Health-dev] [bug #35461] Privilege Separation for Patiet Registration

[Chris Zimmerman]

Follow-up Comment #9, bug #35461 (project health):

Hiya Luis!

Sorry about late response, I've been traveling and the internet was expensive
and heavily-restricted there.

I think the recent commits to restrict all the gyneco, socio, and lifestyle
fields from the frontdesk user by default should address the main concern.
Previously, the default installation for the frontdesk user *was able* to see
the patient medical history, specifically gyneco, socio, and lifestyle fields.
That seemed unintended. Hehe.

Regards,

C

PS: I did give the suggested solution (separate models) an attempt but the
only relationship that makes sense is a 1-1 (somewhat ugly). You'd also have
to redo the patient view considering the view-model restrictions.

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?35461>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/