continuation of: Karolinska/Stockholm procurement of Digital health platform (CDR, tools, services, consultants) - #17 by joostholslag @Daniel.Alomar @birger.haarbrandt @erik.sundvall @tangit86 @sebastian.iancu and @Sidharth_Ramesh are probably interested. Background: Currently access control …

XDS and openEHR work really well together -see Slovenia for a prime example. @borut.fabjan is the expert here. We are using his XDS archetype in the UK to tag all compositions with at least a ‘document type’ code to allow discovery via XDS or the English record locator service. [image] Clu…

[image] birger.haarbrandt: I think you will need to put some domain specific language on top of any access control technology to make it user friendly for administrators in healthcare. This is exactly what I’m trying to achieve. My current idea is to expres the openEHR resource scope in a jso…

[image] joostholslag: And there is a general statement that the composition is the atomic unit of commit . And “An ENTRY is also the minimal unit of information any query should return” . We should modify that a bit to say that an Entry is the minimal unit of information that should be returne…

I agree it’s fine to be more selective in the query than the entry. But regarding the access control, you need access to the entire composition (or definitely to the entry level) to be able to correctly interpret the result of the query and to build the right filters in the where clause. E.g. in ord…

FYI: here’s a nice blog, discussion and upcoming meetup about access control in FHIR: Gasper Andrejc on LinkedIn: Extending the Firely Server & FHIR DS4P

The topic below is also relevant: [image] Security, privacy and patient identity openEHR & standards A model for an archetype-based access policy management was my first idea for my PhD thesis more than ten years ago (time flies!). Finally I moved to a general archetype m…

One of the questions I have is whether it’s useful to define AQL as a scope. My feeling is it’s only useful to set read access at the ‘entry’ level. Because doing a smaller read authorisation violates the specification that entry is the smallest unit a query should return. And assuming the maximum s…

Apologies if I missed a nuance of what you are saying. One of the issues is that entry-level is not sufficient because it won’t allow you to filter for terminologies. Classic example will be lab values, diagnoses, medications etc., where you will likely depend on whitelisting/blacklisting defined co…

This week I attended to an HL7 webinar about FHIR Access Control. We are all facing the same problems, since this is a complex topic. They are working around several proposal that might be of interest for openEHR. You can see the videos of the webinar here: https://www.youtube.com/playlist?list=PL…

My main point was that if a user is allowed to read one element in an entry, they must be allowed to see all the others in that entry. But interesting point with lab data. It might be valid access policy that a nurse should be able to see obs.lab test result for eg HbA1c (diabetes) but not for ANCA…

access control for openEHR 'resources'

Implementation

chunlan.ma (Chunlan Ma) 30 April 2024 05:16 11

The topic below is also relevant:

Topic		Replies	Views
Relationship between FHIR and openEHR HL7 FHIR	22	14887	8 July 2024
Procurement requirements for an openEHR native forms tool Procurements	25	736	24 October 2024
Karolinska/Stockholm procurement of Digital health platform (CDR, tools, services, consultants) Procurements	26	6171	7 January 2025
Does openEHR recommends to define service APIs using openEHR models as resources/TOs Implementation	12	833	19 August 2021
Security, privacy and patient identity openEHR & standards	10	1946	15 March 2023
Data extraction from openEHR - a demanding and challenging task? Implementation	25	809	19 August 2025
How to start Technical (archive)	26	154	15 August 2013
openEHR future directions Clinical (archive)	7	36	18 March 2011
The honest story about implementing openEHR as an EHR-vendor New to openEHR?	11	2259	8 October 2026
System integration vital signs Integration	15	254	27 November 2024

access control for openEHR 'resources'

Related topics