FHIR Resource Definition: Structure and Usage of Access Permissions (TPermission)
Besa Fhir Help File: bsFhir_r5: Class TPermission
Summary
This article details the technical specification for the 'Permission' resource, which defines access rules for data within electronic health record systems. This resource provides a mechanism to control who can access data and under what context.
Details
This document introduces the class definition `TPermission`, related to FHIR (Fast Healthcare Interoperability Resources) version 5. It serves as a resource designed to hold rules regarding access permissions for specific data. Key properties defined include 'status', 'asserter', 'validity', and 'justification'. These elements specify who asserts the permission (`asserter`), the duration of the permission (`validity`), and the rationale behind the claim (`justification`). Furthermore, it includes complex logic components like 'combining' and arrays for rule sets (`rule`). This structure provides a technical foundation for implementing advanced policy decision processes that go beyond simple allow/deny rules. In Japanese healthcare IT, where balancing personal data protection with data utilization is critical, clearly defining access permissions is crucial. This specification is notable as an attempt to integrate a governance layer—defining 'who' and 'why'—into the FHIR standard, moving beyond mere data exchange interoperability.
Original content copyright by respective publishers