HL7 FHIR Implementation Guide: Data Access Policies
1.0.0-current - ci-build
HL7 FHIR Implementation Guide: Data Access Policies
1.0.0-current - ci-build
HL7 FHIR Implementation Guide: Data Access Policies, published by HL7 International / Security. This guide is not an authorized publication; it is the continuous build for version 1.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/data-access-policies/ and changes regularly. See the Directory of published versions
| Page standards status: Informative |
{
"resourceType" : "Permission",
"id" : "ex-overriding-rbac-by-role",
"meta" : {
"profile" : [
🔗 "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionWithResourceType"
],
"security" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "HTEST"
}
]
},
"text" : {
"status" : "extensions",
"div" : "<div xmlns=\"http://www.w3.org/1999/xhtml\"><p class=\"res-header-id\"><b>Generated Narrative: Permission ex-overriding-rbac-by-role</b></p><a name=\"ex-overriding-rbac-by-role\"> </a><a name=\"hcex-overriding-rbac-by-role\"> </a><a name=\"ex-overriding-rbac-by-role-en-US\"> </a><p><b>status</b>: Active</p><p><b>asserter</b>: <a href=\"Organization-ex-organization.html\">Organization nowhere</a></p><p><b>date</b>: 2023-12-22</p><p><b>combining</b>: Permit-overrides</p><blockquote><p><b>rule</b></p><p><b>type</b>: Deny</p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Observation</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: AllergyIntolerance</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Condition</p></blockquote><blockquote><p><b>activity</b></p><p><b>actor</b>: <a href=\"PractitionerRole-DrRole.html\">PractitionerRole Doctor</a></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action C}\">Create</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action U}\">Update</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason TREAT}\">treatment</span></p></blockquote><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Practitioner</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: PractitionerRole</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Person</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Patient</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: RelatedPerson</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Organization</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Location</p></blockquote><h3>Activities</h3><table class=\"grid\"><tr><td style=\"display: none\">-</td><td><b>Actor</b></td><td><b>Action</b></td><td><b>Purpose</b></td></tr><tr><td style=\"display: none\">*</td><td><a href=\"PractitionerRole-DrRole.html\">PractitionerRole Doctor</a></td><td><span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span></td><td><span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason TREAT}\">treatment</span></td></tr></table><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: AllergyIntolerance</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Condition</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Practitioner</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: PractitionerRole</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Person</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Patient</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: RelatedPerson</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Organization</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Location</p></blockquote><blockquote><p><b>activity</b></p><p><b>actor</b>: <a href=\"PractitionerRole-DieticianRole.html\">PractitionerRole Dietician</a></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason TREAT}\">treatment</span>, <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HOPERAT}\">healthcare operations</span></p></blockquote><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Person</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Patient</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: RelatedPerson</p></blockquote><blockquote><p><b>activity</b></p><p><b>actor</b>: <a href=\"PractitionerRole-RegistrationRole.html\">PractitionerRole Registration Clerk</a></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action C}\">Create</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action U}\">Update</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HOPERAT}\">healthcare operations</span></p></blockquote><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Practitioner</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: PractitionerRole</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Organization</p></blockquote><blockquote><p><b>data</b></p><p><b>Permission rule by Resource Type</b>: Location</p></blockquote><h3>Activities</h3><table class=\"grid\"><tr><td style=\"display: none\">-</td><td><b>Actor</b></td><td><b>Action</b></td><td><b>Purpose</b></td></tr><tr><td style=\"display: none\">*</td><td><a href=\"PractitionerRole-RegistrationRole.html\">PractitionerRole Registration Clerk</a></td><td><span title=\"Codes:{http://hl7.org/fhir/audit-event-action R}\">Read</span></td><td><span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HOPERAT}\">healthcare operations</span></td></tr></table><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>activity</b></p><p><b>actor</b>: <a href=\"PractitionerRole-AdminRole.html\">PractitionerRole Administration</a></p><p><b>action</b>: <span title=\"Codes:{http://hl7.org/fhir/audit-event-action D}\">Delete</span>, <span title=\"Codes:{http://hl7.org/fhir/audit-event-action U}\">Update</span></p><p><b>purpose</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActReason HOPERAT}\">healthcare operations</span></p></blockquote><p><b>limit</b>: <span title=\"Codes:{http://terminology.hl7.org/CodeSystem/v3-ActCode AUDIT}\">audit</span></p></blockquote></div>"
},
"status" : "active",
"asserter" : {
🔗 "reference" : "Organization/ex-organization"
},
"date" : [
"2023-12-22"
],
"combining" : "permit-overrides",
"rule" : [
{
"type" : "deny"
},
{
"type" : "permit",
"data" : [
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Observation"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "AllergyIntolerance"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Condition"
}
]
}
],
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/DrRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "C"
}
]
},
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "R"
}
]
},
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "U"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "TREAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
},
{
"type" : "permit",
"data" : [
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Practitioner"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "PractitionerRole"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Person"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Patient"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "RelatedPerson"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Organization"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Location"
}
]
}
],
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/DrRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "R"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "TREAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
},
{
"type" : "permit",
"data" : [
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "AllergyIntolerance"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Condition"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Practitioner"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "PractitionerRole"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Person"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Patient"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "RelatedPerson"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Organization"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Location"
}
]
}
],
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/DieticianRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "R"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "TREAT"
}
]
},
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "HOPERAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
},
{
"type" : "permit",
"data" : [
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Person"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Patient"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "RelatedPerson"
}
]
}
],
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/RegistrationRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "C"
}
]
},
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "R"
}
]
},
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "U"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "HOPERAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
},
{
"type" : "permit",
"data" : [
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Practitioner"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "PractitionerRole"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Organization"
}
]
},
{
"extension" : [
{
"url" : "http://hl7.org/fhir/uv/dap/StructureDefinition/dap.permissionResourceType",
"valueCode" : "Location"
}
]
}
],
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/RegistrationRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "R"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "HOPERAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
},
{
"type" : "permit",
"activity" : [
{
"actor" : [
{
🔗 "reference" : "PractitionerRole/AdminRole"
}
],
"action" : [
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "D"
}
]
},
{
"coding" : [
{
"system" : "http://hl7.org/fhir/audit-event-action",
"code" : "U"
}
]
}
],
"purpose" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActReason",
"code" : "HOPERAT"
}
]
}
]
}
],
"limit" : [
{
"coding" : [
{
"system" : "http://terminology.hl7.org/CodeSystem/v3-ActCode",
"code" : "AUDIT"
}
]
}
]
}
]
}
IG © 2023+ HL7 International / Security. Package hl7.fhir.uv.dap#1.0.0-current based on FHIR 6.0.0-ballot2. Generated 2024-12-21
Links: Table of Contents |
QA Report
| Version History |
|
Propose a change