Re: [Health-dev] [bug #35461] Privilege Separation for Patiet Registration

[Christoph H. Larsen]

I fully agree, and sorry for my long silence. 
As GNU Health targets (also) health facilities in resource-limited setting, we cannot expect any best practice triage nurse reception setup. More often than not, it will just be a clerk who acts as receptionist, and that perdonn should only have access to patient core data.
Thanks a lot! 
Chris

---

From: Chris Zimmerman <address@hidden>
Sent: May 29, 2015 7:53:23 AM GMT+07:00
To: Luis Falcon <address@hidden>, "Cédric Krier" <address@hidden>, "Christoph H. Larsen" <address@hidden>, Chris Zimmerman <address@hidden>, address@hidden
Subject: [bug #35461] Privilege Separation for Patiet Registration

Follow-up Comment #9, bug #35461 (project health):

Hiya Luis!

Sorry about late response, I've been traveling and the internet was expensive
and heavily-restricted there.

I think the recent commits to restrict all the gyneco, socio, and lifestyle
fields from the frontdesk user by default should address the main concern.
Previously, the default installation for the frontdesk user *was able* to see
the patient medical history, specifically gyneco, socio, and lifestyle fields.
That seemed unintended. Hehe.

Regards,

C

PS: I did give the suggested solution (separate models) an attempt but the
only relationship that makes sense is a 1-1 (somewhat ugly). You'd also have
to redo the patient view considering the view-model restrictions.



Reply to this item at:

  <http://savannah.gnu.org/bugs/?35461>


  Message sent via/by Savannah
  http://savannah.gnu.org/

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.