HL7 FHIR Implementation Guide: Data Access Policies
1.0.0-current - ci-build International flag

HL7 FHIR Implementation Guide: Data Access Policies, published by HL7 International / Security. This guide is not an authorized publication; it is the continuous build for version 1.0.0-current built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/HL7/data-access-policies/ and changes regularly. See the Directory of published versions

ValueSet: ValueSet for Permission Rule Combining

Official URL: http://hl7.org/fhir/ValueSet/permission-rule-combining-vs Version: 1.0.0-current
Standards status: Trial-use Maturity Level: 0 Computable Name: PermissionRuleCombiningVS
Other Identifiers: OID:2.16.840.1.113883.4.642.3.3231

Codes identifying rule combining algorithm.

References

Logical Definition (CLD)

 

Expansion

Expansion performed internally based on codesystem Permission Rule Combining v6.0.0-ballot3 (CodeSystem)

This value set contains 6 concepts

SystemCodeDisplay (en)DefinitionJSONXML
http://hl7.org/fhir/permission-rule-combining  deny-overridesDeny-overridesThe deny overrides combining algorithm is intended for those cases where a deny decision should have priority over a permit decision.
http://hl7.org/fhir/permission-rule-combining  permit-overridesPermit-overridesThe permit overrides combining algorithm is intended for those cases where a permit decision should have priority over a deny decision.
http://hl7.org/fhir/permission-rule-combining  ordered-deny-overridesOrdered-deny-overridesThe behavior of this algorithm is identical to that of the “Deny-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission.
http://hl7.org/fhir/permission-rule-combining  ordered-permit-overridesOrdered-permit-overridesThe behavior of this algorithm is identical to that of the “Permit-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission.
http://hl7.org/fhir/permission-rule-combining  deny-unless-permitDeny-unless-permitThe “Deny-unless-permit” combining algorithm is intended for those cases where a permit decision should have priority over a deny decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result.
http://hl7.org/fhir/permission-rule-combining  permit-unless-denyPermit-unless-denyThe “Permit-unless-deny” combining algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. This algorithm has the following behavior.

Description of the above table(s).