This portal provides an open platform for user feedback and product change requests. Anyone can add an idea and remain as a Guest, but please consider signing up so that others can see who has created the ideas!
Note: this is a public facing web portal, any text here can be viewed by anyone over the internet, so please consider carefully the content you wish to share and please do not post anything of a sensitive nature.
I have a question and concern raised by some potential users about the access levels on the Interweave portal, especially concerning non-clinical staff. Is the portal designed to restrict access based on user roles, or does it provide uniform access to all patient data for every account? There's a strong recommendation for the implementation of role-based access restrictions to protect patient data and prevent unauthorized access. This highlights the critical need to ensure that access levels are managed correctly to uphold security and confidentiality. Could you provide more information on how the portal manages access levels?
Hi Anthony,
I've marked this ticket as 'Planned'.
The enhancement of our roles based access controls is something we have planned in on our roadmap: https://yhcr.aha.io/published/7a423004049c0432de51273ec9d90253?page=1
As part of this work, we will be introducing roles 1 and 2 from the national guidance papers to limit access for users who don't need to see a patient's full dataset.
When the work is complete, we will mark this ticket as 'Shipped'.