taskGNU Health - Tasks: task #16294, Harden access control to key...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

task #16294: Harden access control to key patient models

Submitter:  Luis Falcon <meanmicio>
Submitted:  Sun 18 Dec 2022 08:49:03 PM UTC
   
 
Should Start On:  Sun 18 Dec 2022 12:00:00 AM UTC Should be Finished on:  Sun 25 Dec 2022 12:00:00 AM UTC
Category:  Security Priority:  5 - Normal
Status:  Done Privacy:  Public
Assigned to:  meanmicio Percent Complete:  100%
Open/Closed:  Closed Release:  4.1.0
Module:  healh Component:  Hospital Management

Sun 15 Jan 2023 05:31:21 PM UTC, comment #2: 

Add default access to health_imaging package.
https://hg.savannah.gnu.org/hgweb/health/rev/e8e09f114875

Luis Falcon <meanmicio>
Group administrator
Fri 13 Jan 2023 10:11:47 PM UTC, comment #1: 
Luis Falcon <meanmicio>
Group administrator
Sun 18 Dec 2022 08:49:03 PM UTC, original submission:  

Dear GNUHealth devs
The access control to the GNU Health / Tryton models are quite robust. In addition, we can new groups and / or adapt the current groups.

Finding the balance between security and usability is not trivial, and most of the time, it requires further adaptations on implementations.

In the default groups, I we should have stronger ACL for the main patient related models, such as patient and evaluation, not allowing deletion by default.

Bests
Luis

Luis Falcon <meanmicio>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by meanmicio (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-01-15 meanmicio StatusIn Progress Done
        Percent Complete80% 100%
        Open/ClosedOpen Closed
    2023-01-13 meanmicio Percent Complete40% 80%
    2022-12-20 meanmicio Percent Complete20% 40%
    2022-12-18 meanmicio Percent Complete0% 20%
        ReleaseNone 4.1.0

    Back to the top

    Powered by Savane 3.13-02a9.
    Corresponding source code