Design Forum 2015-08-03: Open Time Slot

[dkayiwa (Daniel Kayiwa)]

How about Zain walking us through?

Relationship-Based Access Control for OpenMRS

OpenMRS uses Role-Based Access Control (RBAC) as its access control mechanism. A limitation of this RBAC implementation is that, if a user can access a patient’s file then he/she can access every patient’s file. To overcome this limitation, I have been working on implementing Relationship-Based Access Control (ReBAC) into OpenMRS. Instead of static role assignments, ReBAC bases its authorization decisions on the relationship between the user and the resource he/she is trying to access. Recently…