...
Once the user is logged in, a set of tokens (see Authentication and authorization for details on the tokens) are handed out by the AS (based on the OIO SAML AuthResponse). These tokens serve as 'tickets' and are verified and asserted every time the user interacts with the eHealth Infrastructure. If deemed invalid or expired by the eHealth Infrastructure, no further interaction happens and the user is denied from accessing or manipulating data. As the tokens from the login initially are a very broad spectredspectrum, little or no data is accessible. This entirely depends on the information given in the OIO SAML AuthResponse. If the user e.g. happens to be part of multiple careteams, the AS is unable to supply proper default values as the choice is not unambiguously. This is due to the fact that the access to data under each careteam may differ from careteam to careteam. In order to actually gain access to eg. clinical or organizational data, the user needs to actively choose in which context the user wants to interact. Based on the choice of context, the eHealth Infrastructure can forge a new set of tokens (based on the initial handed-out tokens + the chosen context - see Switching Context for details) which then provides access under the given chosen context.
...
Role name in OIO BPP | Domain | Description (non-normative) | Privileges (Danish) | OIO Data constraints (Exttest) | OIO Data constraints (Prod) | ||||
|---|---|---|---|---|---|---|---|---|---|
urn:dk:sundhed:eehealth:role:careteam_administrator | Administrative | Role capable of creating and maintaining careteams |
|
| |||||
urn:dk:sundhed:ehealth:role:citizen_enroller | Clinical | Role capable of initiating episode of care and setting up careplans for Citizen |
|
| |||||
urn:dk:sundhed:ehealth:role:clinical_administrator | Administrative | Role capable of creating and maintaining plan definitions |
|
| |||||
urn:dk:sundhed:ehealth:role:clinical_supporter | Support, Service & Logistics | Role capable of searching and updating communications related to support and incidents |
|
| |||||
urn:dk:sundhed:ehealth:role:clinical_viewer | Clinical | Role capable of viewing a citizen's demographic data, careplans and measurements. |
|
| |||||
urn:dk:sundhed:ehealth:role:monitoringincident_assistorClinicalmanager | Support, Service & Logistics | Role capable of handling measurements and communication with Citizen. Fremsøge grupper af borgere Se telemedicinsk forløb og pakker hos borger Se Måleregime hos borger Vurdere/håndtere/kvittere for Måledata fra borger Se Grænseværdier til borger Oprette pausering for borger Se kommunikation til/fra borger Skrive kommunikation til borger Se videoaftaler med borger Oprette videoaftale dispatching incidents and tracking status. |
|
| |||||
urn:dk:sundhed:ehealth:role:incident_reporter | Support, Service & Logistics | Role capable of creating and maintaining communications related to support and incidents. |
|
| |||||
urn:dk:sundhed:ehealth:role:monitoring_adjuster | Clinical | Role capable of maintaining careplans, setting up measurement regimes and reference ranges, suspending and reactivating careplans, handling communication with Citizen. |
| ||||||
urn:dk:sundhed:ehealth:role:questionnaire_editor | Administrative | Role capable of creating and maintaining questionnaires |
| ||||||
| |||||||||
urn:dk:sundhed:ehealth:role:clinicalmonitoring_administratorassistor | AdministrativeClinical | Role capable of creating and maintaining plan definitionshandling measurements and communication with Citizen. |
| urn:dk:sundhed:ehealth:role:clinical_supporter | Support, Service & Logistics | Role capable of searching and updating communications related to support and incidents |
|
| |
urn:dk:sundhed:ehealth:role:incidentorder_reporterplacer | Support, Service & Logistics (secondary: Clinical) | Role capable of creating and maintaining communications related to support and incidents. Sender fejlmelding Ændrer fejlmelding accessing carePlans, placing orders for devices and services, maintaining orders |
|
| |||||
urn:dk:sundhed:ehealth:role:incidentquestionnaire_managerSupport, Service & Logisticseditor | Administrative | Role capable of dispatching incidents and tracking status. Modtager og behandler fejlmelding creating and maintaining questionnaires |
|
| |||||
urn:dk:sundhed:ehealth:role:report_user | Administrative | Role capable of generating reports for statistics and administration |
| ||||||
urn:dk:sundhed:ehealth:role:careteam_administrator | Administrative | Role capable of creating and maintaining careteams |
| ||||||
urn:dk:sundhed:ehealth:role:order_placer | Support, Service & Logistics (secondary: Clinical) | Role capable of accessing carePlans, placing orders for devices and services, maintaining orders |
| ||||||
| |||||||||
urn:dk:sundhed:ehealth:role:service_and_logistics | Support, Service & Logistics | Role capable of processing orders for devices and services |
|
| |||||
urn:dk:sundhed:ehealth:role:terminologyssl_catalogue_administratorAdministrativeannotator | Support, Service & Logistics | Role capable of creating accessing SSL catalogues and maintaining terminologyannotations about devices |
|
| |||||
urn:dk:sundhed:ehealth:role:ssl_catalogue_responsible | Support, Service & Logistics | Role capable of creating and maintaining SSL catalogues |
|
| |||||
urn:dk:sundhed:ehealth:role:ssl_cataloguecontract_annotatorresponsible | Support, Service & Logistics | Role capable of accessing creating and maintaining SSL catalogues and maintaining annotations about devicescontracts and involved parties |
|
| |||||
urn:dk:sundhed:ehealth:role:sslterminology_contract_responsibleSupport, Service & Logisticsadministrator | Administrative | Role capable of creating and maintaining SSL contracts and involved partiesterminology |
|
|
Mapping Privilege Roles to Roles
...