ex-overriding-rbac-by-resource
type: Permission
resource definition: 1.0
resource definition: .0
node role: treeRoot
id:
  v: ex-overriding-rbac-by-resource
meta:
  security:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActReason
      l: v3-ActReason
    code:
      v: HTEST
language:
  v: en
text:
  status:
    v: generated
  div:
    v: Generated Narrative: Permission ex-overriding-rbac-by-resource Language: en Security Label: test health data (Details: ActReason code HTEST = 'test health data') status: Active asserter: Organization nowhere date: 2023-12-22 combining: Permit-overrides rule type: Deny rule type: Permit Data - ResourceType * All FHIR Types: Observation (Observation) activity Actors - Reference * PractitionerRole Doctor action: create, read, update purpose: treatment activity Actors - Reference * PractitionerRole Administration action: delete, update purpose: healthcare operations Limits - Control * audit rule type: Permit Data - ResourceType * All FHIR Types: AllergyIntolerance (AllergyIntolerance) activity Actors - Reference * PractitionerRole Doctor action: create, read, update purpose: treatment activity Actors - Reference * PractitionerRole Dietician action: read purpose: treatment, healthcare operations activity Actors - Reference * PractitionerRole Administration action: delete, update purpose: healthcare operations Limits - Control * audit rule type: Permit Data - ResourceType * All FHIR Types: Condition (Condition) activity Actors - Reference * PractitionerRole Doctor action: create, read, update purpose: treatment activity Actors - Reference * PractitionerRole Dietician action: read purpose: treatment, healthcare operations activity Actors - Reference * PractitionerRole Administration action: delete, update purpose: healthcare operations Limits - Control * audit rule type: Permit Data - ResourceType * All FHIR Types: Practitioner (Practitioner) activity Actors - Reference * PractitionerRole Doctor action: read purpose: treatment activity Actors - Reference * PractitionerRole Dietician action: read purpose: healthcare operations activity Actors - Reference * PractitionerRole Registration Clerk action: read purpose: healthcare operations activity Actors - Reference * PractitionerRole Administration action: delete, update purpose: healthcare operations Limits - Control * audit …
status:
  v: active
asserter:
  l: ex-organization
  reference:
    v: Organization/ex-organization
date:
  v: 2023-12-22
combining:
  v: permit-overrides
rule:
  type:
    v: deny
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: Observation
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: AllergyIntolerance
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: Condition
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: Practitioner
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: RegistrationRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: PractitionerRole
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: RegistrationRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: Person
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: RegistrationRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit
  data:
    resource type:
      system:
        v: http://hl7.org/fhir/fhir-types
        l: fhir-types
      code:
        v: Patient
  activity:
    actor:
      reference:
        l: DrRole
  activity:
    actor:
      reference:
        l: DieticianRole
  activity:
    actor:
      reference:
        l: RegistrationRole
  activity:
    actor:
      reference:
        l: AdminRole
rule:
  type:
    v: permit

v: PractitionerRole/DrRole

v: create

v: read

v: update

v: TREAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: create

v: read

v: update

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: TREAT

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: create

v: read

v: update

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: TREAT

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: read

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: HOPERAT

v: PractitionerRole/RegistrationRole

v: read

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: read

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: HOPERAT

v: PractitionerRole/RegistrationRole

v: read

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: read

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: HOPERAT

v: PractitionerRole/RegistrationRole

v: read

v: update

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

v: PractitionerRole/DrRole

v: read

v: TREAT

v: PractitionerRole/DieticianRole

v: read

v: HOPERAT

v: PractitionerRole/RegistrationRole

v: read

v: update

v: create

v: HOPERAT

v: PractitionerRole/AdminRole

v: delete

v: update

v: HOPERAT

v: AUDIT

resource type:
  system:
    v: http://hl7.org/fhir/fhir-types
    l: fhir-types
  code:
    v: RelatedPerson

actor:
  reference:
    l: DrRole
    reference:
      v: PractitionerRole/DrRole
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: read
purpose:
  coding:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActReason
      l: v3-ActReason
    code:
      v: TREAT

actor:
  reference:
    l: DieticianRole
    reference:
      v: PractitionerRole/DieticianRole
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: read
purpose:
  coding:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActReason
      l: v3-ActReason
    code:
      v: HOPERAT

actor:
  reference:
    l: RegistrationRole
    reference:
      v: PractitionerRole/RegistrationRole
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: read
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: update
purpose:
  coding:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActReason
      l: v3-ActReason
    code:
      v: HOPERAT

actor:
  reference:
    l: AdminRole
    reference:
      v: PractitionerRole/AdminRole
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: delete
action:
  coding:
    system:
      v: http://hl7.org/fhir/restful-interaction
      l: restful-interaction
    code:
      v: update
purpose:
  coding:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActReason
      l: v3-ActReason
    code:
      v: HOPERAT

control:
  coding:
    system:
      v: http://terminology.hl7.org/CodeSystem/v3-ActCode
      l: v3-ActCode
    code:
      v: AUDIT

type:
  v: permit
data:
  resource type:
    system:
      v: http://hl7.org/fhir/fhir-types
      l: fhir-types
    code:
      v: Organization
activity:
  actor:
    reference:
      l: DrRole
      reference:
        v: PractitionerRole/DrRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: TREAT
activity:
  actor:
    reference:
      l: DieticianRole
      reference:
        v: PractitionerRole/DieticianRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
activity:
  actor:
    reference:
      l: RegistrationRole
      reference:
        v: PractitionerRole/RegistrationRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
activity:
  actor:
    reference:
      l: AdminRole
      reference:
        v: PractitionerRole/AdminRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: delete
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: update
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
limit:
  control:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActCode
        l: v3-ActCode
      code:
        v: AUDIT

type:
  v: permit
data:
  resource type:
    system:
      v: http://hl7.org/fhir/fhir-types
      l: fhir-types
    code:
      v: Location
activity:
  actor:
    reference:
      l: DrRole
      reference:
        v: PractitionerRole/DrRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: TREAT
activity:
  actor:
    reference:
      l: DieticianRole
      reference:
        v: PractitionerRole/DieticianRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
activity:
  actor:
    reference:
      l: RegistrationRole
      reference:
        v: PractitionerRole/RegistrationRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: read
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
activity:
  actor:
    reference:
      l: AdminRole
      reference:
        v: PractitionerRole/AdminRole
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: delete
  action:
    coding:
      system:
        v: http://hl7.org/fhir/restful-interaction
        l: restful-interaction
      code:
        v: update
  purpose:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActReason
        l: v3-ActReason
      code:
        v: HOPERAT
limit:
  control:
    coding:
      system:
        v: http://terminology.hl7.org/CodeSystem/v3-ActCode
        l: v3-ActCode
      code:
        v: AUDIT