SynapseDirect

Still a newbie I have been trying to create an account for the clinic clerk with rights set to reception. However i note that when i try signing into that account I can still modify patient records. Am I missing some step in the set up?

 

---

The rights have not been fully enforced.  But if a clerk does alter a clinic note, this is apparent in the last altered field of the note.  This was because it seems in small clinics, users don't want restrictions like this! So, they might want reception to print off a prescription for them to sign etc ...

The only area where the rights are enforced is for the typist who can't do much at all except do the typing.

If people want it, I can enforce the rights in a future build.

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

I would vote yes here! anyone else agrees with me?

---

Before we vote, let's decide on what we are discussing!

Are you wishing for:

1. Stop clerical staff from looking at the consults tab?
2. Stop clerical staff from looking at consults - and therefore will not be able to print out any consults for you
3. Stop clerical staff from editing a consult ( there is an audit trail anyway ) 

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

Stop clerical staff  from editing a consult and preferably not having access to the consult at all.

---

I'd definitely want my secretary to view consults.

I don't see how I'd want here to be able to edit them, other than typing in immunization lot numbers.  So I guess that would be one use.  

There are a myriad of issues here and security profiles with lots of options seem like the only good option.

 

---

What about patient confidentiality issues. Imagine a temporary secretary ( or a regular one) who would "know" a patient or be related to one,and make a unintending remark of "bad" news prematurely and probably unnessarily. Eg: a patient with back pain being investigated for ?metastasis. I think myriad of issues is the right word, so isnt it better to have this option? The right person could at anytime be given more rights to view and edit anyway.

---

Excellent example.

I trust my secretary, so I don't feel any risk in giving her full access to the EMR.   I could predict many situations where I wouldn't feel as comfortable.

 

---

All staff should sign privacy contracts.

However, I could make it so that the receptionist can't see the consults tab, and if you trust your receptionist ... give  her/him doctor rights.

 

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

Really we need custom profiles, not built in ones.  People are unlikely to be happy with any SET permissions systems.  I don't mind giving my secretary doctor rights, in fact i will do it right now.

---

Using custom security profiles is I think a violation of the KISS principle.

I will try restricting the receptionist from all tabs except the patient and appointments tab.

I will probably add another role of nurse who will have similar rights to docs, but will not have appointments.

 

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

What are all the options for security ?

Access to each tab ?

Access to doing dictations

Access to booking

Access to adding documents

Access to deleting documents

Access to adding consults.

 

---

Restrictions can be anything .. but the finer grain they are, the more difficult it will be to maintain.

 

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

Ok, try this one out:

R211B2

1. Enforces security for receptionist on the 2nd (Details) row of tabs

So a receptionist can now only access the first tab in the 2nd row of tabs.
 

 

---

Graham Chiu
Beta Downloads and Documentation Wiki
Developer Forum

R211B2 is perfect. I wouldn't worry as to who puts the patient demographics in before I start the clinic.

---