This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "Permissions Catalog: Recommendations for Reuse"

From HL7Wiki
Jump to navigation Jump to search
Line 1: Line 1:
The current Permissions Catalog for Role-Based Access Control
+
The current Permissions Catalog for Role-Based Access Control specifies a set of normative permissions that specify operations that may be applied to a variety of object types.
 +
 
 +
The permission catalog is a normative specification and it is [http://www.hl7.org/v3ballot/html/welcome/downloads/v3_rbac_2008SEP.zip available for download].
 +
 
 +
 
 +
The operations refer to the ability to append, create, read, update, delete, and execute specific "objects" identified in the RBAC standards. The "objects specify:
  
 
{| border="0" cellspacing="0" cellpadding="3" width="75%" style="border-style:solid;border-width:1pt;border-color:#808080"
 
{| border="0" cellspacing="0" cellpadding="3" width="75%" style="border-style:solid;border-width:1pt;border-color:#808080"
Line 17: Line 22:
 
Administrative Ad-hoc Report
 
Administrative Ad-hoc Report
 
| valign="top" style="background-color: #FFFFFF"|
 
| valign="top" style="background-color: #FFFFFF"|
A role that has this permission, allows the user that logs in with that role to append information to an existing ad-hoc administrative reports.
+
A role that has this permission, allows the user that logs in with that role to append information to an existing ad-hoc administrative report.
 
|}
 
|}
  

Revision as of 18:54, 25 August 2008

The current Permissions Catalog for Role-Based Access Control specifies a set of normative permissions that specify operations that may be applied to a variety of object types.

The permission catalog is a normative specification and it is available for download.


The operations refer to the ability to append, create, read, update, delete, and execute specific "objects" identified in the RBAC standards. The "objects specify:

Permission

Operation

Object

Effect

append

Administrative Ad-hoc Report

A role that has this permission, allows the user that logs in with that role to append information to an existing ad-hoc administrative report.

Healthcare Operations

  • create
  • revise
  • activate
  • complete
  • suspend
  • resume
  • abort
  • hold
  • release
  • cancel
  • obsolete
  • nullify


RIM ActStatus.gif


Value Sets for "Object"

Concept Domains