Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Condition

User Type

EpisodeOfCare Context 

CareTeam Context


Practitioner

required:

must match Condition.contextepisodeOfCare

-



Patient

required:

must match Condition.contextepisodeOfCare

-



System

-

-



Provenance.read

User Type

EpisodeOfCare Context 

CareTeam Context


Practitioner

required:

must match Provenance.target

-




Patient

required:

must match Provenance.target

-



System

-

-


...

Consent.search

User Type

EpisodeOfCare Context

CareTeam Context

Practitioner

required:

must match EpisodeOfCare search parameter (consent.data.reference)

-

Patient

required:

must match EpisodeOfCare search parameter (consent.data.reference)

-

System

-

-

CarePlan/

...

ServiceRequest

ProcedureRequests ServiceRequests are considered a part of a CarePlan and do not have separate privileges.

CarePlans cannot be created directly. They are created and assigned to a patient by calling PlanDefinition$apply 

CarePlan/ProcedureRequest ServiceRequest Read/Suggest-care-teams

User Type

EpisodeOfCare Context

CareTeam Context


Practitioner

required:

must match CarePlan/ProcedureRequestServiceRequest .contextepisodeOfCare

required:

Careplan: Context must match CarePlan.careTeam or Careplan.contextepisodeOfCare.team

ProducereRequest: Context must match CarePlan.careTeam or Careplan.contextepisodeOfCare.team for the CarePlan that the ProcedureRequest ServiceRequest belongs to.



Patient

required:

must match CarePlan/ProcedureRequestServiceRequest.contextepisodeOfCare


-



System

-

-



CarePlan/ProcedureRequest ServiceRequest Update/Update-care-teams

User Type

EpisodeOfCare Context

CareTeam Context

Extra permission


Practitioner

required:

must match CarePlan/ProcedureRequestServiceRequest.contextepisodeOfCare

required:

Careplan: Context must match CarePlan.careTeam or CarePlan.contextepisodeOfCare.team

ProducereRequest: Context must match CarePlan.careTeam or CarePlan.contextepisodeOfCare.team for the CarePlan that the ProcedureRequest ServiceRequest belongs to.





Patient

required:

must match CarePlan/ProcedureRequestServiceRequest.contextepisodeOfCare

-

Only allowed if definition.topic is 'self-treatment' 



System

-

-



...

CarePlan: Update careteam special case

User Type

EpisodeOfCare Context

CareTeam Context

Extra permission


Practitioner

required:

must match CarePlan.contextepisodeOfCare

required:

Must match CarePlan.careTeam


Careplan$update.responsibility permission required in token to update careteam element



...

CarePlan Search

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Practitioner

optional but when present:

must match searchparam theContextepisodeOfCare

optional but when present:

must match searchparam theSubject

Only checked if EpisodeOfCare Context is not set.

required:

Must match search parameter CarePlan.careteam or CarePlan.contextepisodeOfCare.team. (Only a single search parameter is allowed for this element)

Patient

optional but when present:

must match searchparam theContextepisodeOfCare

Always present and must match searchparam theSubject

Only checked if EpisodeOfCare Context is not set.

-

System

-

-

-

...

Goal Create/Read/Update

User Type

Patient Context

EpisodeOfCare Context

CareTeam Context


Practitioner

-

required:

must match Goal.addresses.contextepisodeOfCare

required:

must match Goal.addresses.contextepisodeOfCare.team or Careplan.careteam for the CarePlan that the Goal.addresses ProcedureRequest ServiceRequest belongs to.



Patient

required:

Must match Goal.subject

-

-



System

-

-

-


Goal Search

User Type

Patient Context

EpisodeOfCare Context

CareTeam Context


Practitioner

-

required:

must match search param: addresses.contextepisodeOfCare

required:

must match search param addresses.contextepisodeOfCare.team or Careplan.careteam for the CarePlan that the addresses ProcedureRequest ServiceRequest belongs to.

Patient

required:

Must match search param addresses.subject

-

-



System

-

-

-


...

CommunicationRequest Create/Read/Update/Delete

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Details

Practitioner

required

must match CommunicationRequest.contextepisodeOfCare

not checked

required

must match CommunicationRequest.recipient if recipient contains a careteam



Patient

optional but when present:

must match CommunicationRequest.contextepisodeOfCare


required

must match CommunicationRequest.recipient

-

Update: Only status


System

-


-


...

CommunicationRequest Search

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context


Practitioner

required if searchparam recipient is a patient. 

optional otherwise.

must match searchparam CommunicationRequest.context episodeOfCare when present

optional but when present:

must match searchparam CommunicationRequest.subject

required if searchparam recipient is a careteam



Patient

optional but when present

must match CommunicationRequest.contextepisodeOfCare

Always present and must match searchparam CommunicationRequest.recipient

-



System

-

-

-


...

ClinicalImpression create/read/update

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context


Practitioner

required:

must match ClinicalImpression.contextepisodeOfCare

-

required:

must be in ClinicalImpressions.ehealth-careplan.careTeam or ClinicalImpressions.contextepisodeOfCare.team



Patient

optional but when present:

must match ClinicalImpression.contextepisodeOfCare

required when EOC context not present:

must match ClinicalImpression.subject

-



System

-

-

-


...

ClinicalImpression.search

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context


Practitioner

optional but when present:

must match searchparam: contextepisodeOfCare

optional

must match searchparam: subject

Only checked if EOC context is not present:

required:

Must match search param value in context.team or carePlan.careTeam


Patient

optional but when present:

must match searchparam: contextepisodeOfCare

required when EpisodeOfCare Context not present:

must match searchparam: subject


-



System

-

-

-


...

Task create/read/update

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context  / UserId

Extra Permission

Practitioner

optional but when present:

must match Task.contextepisodeOfCare

optional

must match Task.contextepisodeOfCare.subject

Only checked if EOC context is not present:

CareTeam Context must match Task.responsible

User must have at least one corresponding restriction category privilege in Task.restriction-category.

UserID must match Task.responsible, Task.owner or Task.requester


Patient

optional but when present:

must match Task.contextepisodeOfCare

required when EOC context not present:

must match Task.contextepisodeOfCare.subject

UserID must match Task.responsible, Task.owner or Task.requester



System

-

-

-


...

Task search

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context  / UserId

Extra Permission

Practitioner

optional but when present:

must match searchparam ContextepisodeOfCare

optional

must match searchparam Context.subject

Only checked if EOC context is not present:

CareTeam Context must match searchparam responsible

User must have all restriction category privileges corresponding to the list in searchparam restriction-category.

UserID must match searchparam: Responsible, Owner or Requester


Patient

optional but when present:

must match searchparam ContextepisodeOfCare

required when EpisodeOfCare Context not present:

must match searchparam theContext.subject

UserID must match searchparam: Responsible, Owner or Requester



System

-

-

-


...

Communication read

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context


Practitioner

optional but when present:

must match communication.contextepisodeOfCare

required if EpisodeOfCare context not present:

must match communication.subject

Only checked if EpisodeOfCare Context is not present.

A match must be found either through the Careteam or the UserID

  • Careteam: must match either communication.senderCareTeam or communication.recipientCareTeam

  • UserID: must match communication.sender or communication.recipient


Patient

-

required:

must match communication.recipient or communication.sender

-


System

-

-

-


...

Communication create/patch

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Extra permission

Practitioner

optional but when present:

must match communication.contextepisodeOfCare

required if EpisodeOfCare context not present:

must match communication.subject

Only checked if EpisodeOfCare Context is not present.

A match must be found either through the Careteam or the UserID

  • Careteam: must match either communication.senderCareTeam

  • UserID: must match communication.sender


Patient

-

required:

must match communication.subject

-

communication.sender must match AuthToken.userId

System

-

-

-


...

Observation read

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Practitioner

required:

must match observation.contextepisodeOfCare

--

required:

If the CareTeam is assigned on the EpisodeOfCare:

  • The user is granted access with no further checks when the EpisodeOfCare.team of the EpisodeOfCare Context contains the CareTeam in the CareTeam Context

If the Careteam is assigned on the CarePlan:

  • Observation.basedOn must be a ProcedureRequest ServiceRequest which is referenced in CarePlan.activity.reference where the CarePlan.careTeam contains the CareTeam in the CareTeam Context

Patient

optional but when present:

must match observation.contextepisodeOfCare

required when EOC context not present:

must match observation.subject

Only checked if EpisodeOfCare Context is not present.

--

System

--

--

--

...

QuestionnaireResponse read

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Practitioner

required:

must match questionnaireResponse.contextepisodeOfCare

--

required:

If the CareTeam is assigned on the EpisodeOfCare:

  • The user is granted access with no further checks when the EpisodeOfCare.team of the EpisodeOfCare Context contains the CareTeam in the CareTeam Context

If the Careteam is assigned on the CarePlan:

  • QuestionnaireResponse.basedOn must be a ProcedureRequest ServiceRequest which is referenced in CarePlan.activity.reference where the CarePlan.careTeam contains the CareTeam in the CareTeam Context

Patient

optional but when present:

must match questionnaireResponse.contextepisodeOfCare

required when EOC context not present:

must match questionnaireResponse.subject

--

System

--

--

--

...

QuestionnaireResponse drafts create/update

User Type

EpisodeOfCare Context

CareTeam Context

Practitioner

required:

must match questionnaireResponse.contextepisodeOfCare

required:

If the CareTeam is assigned on the EpisodeOfCare:

  • The user is granted access with no further checks when the EpisodeOfCare.team of the EpisodeOfCare Context contains the CareTeam in the CareTeam Context

If the Careteam is assigned on the CarePlan:

  • QuestionnaireResponse.basedOn must be a ProcedureRequest ServiceRequest which is referenced in CarePlan.activity.reference where the CarePlan.careTeam contains the CareTeam in the CareTeam Context

Patient

required

must match questionnaireResponse.contextepisodeOfCare

--

System

--

--

Media read

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Practitioner

required:

must match media.contextepisodeOfCare

--

required:

If the CareTeam is assigned on the EpisodeOfCare:

  • The user is granted access with no further checks when the EpisodeOfCare.team of the EpisodeOfCare Context contains the CareTeam in the CareTeam Context

If the Careteam is assigned on the CarePlan:

  • Media.basedOn must be a ProcedureRequest ServiceRequest which is referenced in CarePlan.activity.reference where the CarePlan.careTeam contains the CareTeam in the CareTeam Context

Patient

optional but when present:

must match media.contextepisodeOfCare

required when EOC context not present:

must match media.subject

--

System

--

--

--

...

Library evaluate

User Type

EpisodeOfCare Context

Patient Context

CareTeam Context

Practitioner

required:

must match either Observation.contextepisodeOfCare

or QuestionnaireResponse.contextepisodeOfCare

required:

must match either Observation.subject

or QuestionnaireResponse.subject

-

Patient

required:

must match either Observation.contextepisodeOfCare

or QuestionnaireResponse.contextepisodeOfCare

required:

must match either Observation.subject

or QuestionnaireResponse.subject

-

System

-

-

-

...