Skip to Main Content
Interweave Portal - Ideas

This portal provides an open platform for user feedback and product change requests. Anyone can add an idea and remain as a Guest, but please consider signing up so that others can see who has created the ideas!

Note: this is a public facing web portal, any text here can be viewed by anyone over the internet, so please consider carefully the content you wish to share and please do not post anything of a sensitive nature.

Status Shipped
Created by Toby Page
Created on Nov 12, 2021

Develop functionality in FHIR appliance to apply data access control policies (returning OperationOutcome resources)

In order to support the requirement of an organisation to selectively return historical information, it would be useful for the FHIR appliance to be able to manage and apply a data access control policy. E.g. This policy would trigger the return of an OperationOutcome resource when historic data is requested for non-audit purposes.

  • Attach files
  • Admin
    Ian Clucas
    Reply
    |
    Jan 26, 2022

    Hi Toby, following our discussions we have a development in the pipeline to honour the deletion of data, and I understand yourself and Synanetics will supplement this with some local work, as per your emails from 25/1/2022. Our work will be planned into the next available sprint

  • Admin
    Ian Clucas
    Reply
    |
    Dec 22, 2021

    as discussed, a meeting has now been booked for this

  • Toby Page
    Reply
    |
    Dec 21, 2021

    hi Ian, any update on this one please? Shall I contact Neil?

  • Admin
    Ian Clucas
    Reply
    |
    Nov 25, 2021

    Sounds like a conversation with yourself and Neil would be in order, I'll try to arrange this

  • Toby Page
    Reply
    |
    Nov 18, 2021

    Thanks Ian. I think it's another level of policy rule beyond what they store in the local system. i.e. "We only think the last 12 months of data is suitable for sharing". The inactive/active state wouldn't give us that as they'd still want to share inactive (within the 12 month window). Yes, it is social care but Neil made the same decision for their data.
    Happy to have a chat about it if that helps.

    Toby Page
    0776 6331074
    Architecture consultant on behalf of LLR Shared Care Record

  • Admin
    Ian Clucas
    Reply
    |
    Nov 18, 2021

    Hi Toby, are you able to outline the business process here please? Tim and I have discussed and think this is related to records that no longer need to be displayed to end users, e.g. in the event of archiving. If this is the case then we would seek to honour the retention rules that should already place within a source system, e.g. if a record is set to Inactive, do we need to hide this / not retrieve it from the FHIR appliance. If this is related to social care then we could engage with Neil Bartram for the operational perspective. Please advise, thanks