HL7 FHIR Implementation Guide: Data Access Policies
0.1.0 - ci-build Global (Whole world)

HL7 FHIR Implementation Guide: Data Access Policies, published by HL7 International / Security. This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/data-access-policies/ and changes regularly. See the Directory of published versions

: A Permission with rules for only doctors

Raw xml | Download


<Permission xmlns="http://hl7.org/fhir"
            resourceDefinition="http://hl7.org/fhir/StructureDefinition/Permission|0.1.0">
  <id value="ex-permission-directory-doctors-only"/>
  <meta>
    <security>
      <system value="http://terminology.hl7.org/CodeSystem/v3-ActReason"/>
      <code value="HTEST"/>
    </security>
  </meta>
  <language value="en"/>
  <text>
    <status value="generated"/>
    <div xmlns="http://www.w3.org/1999/xhtml"><p class="res-header-id"><b>Generated Narrative: Permission ex-permission-directory-doctors-only</b></p><a name="ex-permission-directory-doctors-only"> </a><a name="hcex-permission-directory-doctors-only"> </a><div style="display: inline-block; background-color: #d9e0e7; padding: 6px; margin: 4px; border: 1px solid #8da1b4; border-radius: 5px; line-height: 60%"><p style="margin-bottom: 0px"/><p style="margin-bottom: 0px">Security Label: <a href="http://terminology.hl7.org/7.4.0/CodeSystem-v3-ActReason.html">test health data (Details: ActReason code HTEST = 'test health data')</a></p></div><p><b>status</b>: Active</p><p><b>asserter</b>: <a href="Organization-ex-organization.html">nowhere</a></p><p><b>date</b>: 2023-11-22</p><p><b>combining</b>: Deny-unless-permit</p><blockquote><p><b>rule</b></p><p><b>type</b>: Permit</p><blockquote><p><b>activity</b></p><h3>Actors</h3><table class="grid"><tr><td style="display: none">-</td><td><b>Extension</b></td></tr><tr><td style="display: none">*</td><td/></tr></table></blockquote></blockquote></div>
  </text>
  <status value="active"/>
  <asserter>🔗 
    <reference value="Organization/ex-organization"/>
  </asserter>
  <date value="2023-11-22"/>
  <combining value="deny-unless-permit"/>
  <rule>
    <type value="permit"/>
    <activity>
      <actor>
        <extension
                   url="http://hl7.org/fhir/StructureDefinition/permission-rule-expression">
          <valueExpression>
            <description
                         value="select all Practitioner resources where the Practitioner has a PractitionerRole with code of doctor"/>
            <language value="application/x-fhir-query"/>
            <expression
                        value="Practitioner?_has:PractitionerRole:practitioner:role=http://terminology.hl7.org/CodeSystem/practitioner-role|doctor"/>
          </valueExpression>
        </extension>
      </actor>
    </activity>
  </rule>
</Permission>