Controlling acces to LBV forms in OpenEMR

svkrishna wrote on Friday, March 21, 2014:

We are trying to customize the OpenEMR in one of our clinincs and we have a requirement where a certain form should be available only to the frontdesk and not physician (and vice versa) how can we achieve this? We created custom LBV forms.

Thank you!

blankev wrote on Friday, March 21, 2014:

Interesting question!

Fine-tuning with ACL seems like an unpleasant surprise and an almost impossible task.

Best thing to do, I can think of, is open a new Facility and give only Front-desk personnel the password. Than through ACL give the Front-desk in that Facility the right to see, create and delete forms.

svkrishna wrote on Saturday, March 22, 2014:

Thank you for the response Pieter W. can you please let me know how to set ACL for forms ? I see the option forms administration under administration but no further option to set up acces.

blankev wrote on Saturday, March 22, 2014:

Making things work and keeping things working is one of the hardest parts to do whithin ACL.

Go to Administration => ACL

There, you will find the option who is allowed to do what. If you can’t see these options you need to Login as administrator or Super User, with all rights to make changes, and Add groups of Users with special rights.

USER: Admin has the most rights of all Users. If you Click Edit and Delete some of the Admin permissions, you might not be able to Login at all or see things that you were used to see and permissions you might need to make changes in ACL. Best is to make a copy of the Admin (User) and name it something like meadmin (User type)and start experimenting with permission to make Permit and Deny permissions changes for meadmin -user. Under the Option Groups you can see what user is member of what group and what permission each one can have or not have. Digging in deeper might be needed for your options For Front-desk and Doctors, but I have not been able to do this in the Demo versions.

From here it is a matter of Login and Logout and see what can or not can be done.

A valuable tool to use is the Manual in the Advanced tab of ACL administration. You will get a good explanation about a cruise-ship and personal and passengers, so it is not a dedicated Advanced Manual for OpenEMR but it is handy to learning tool to understand ACL. Be sure to have some nasty encounters not intended, but Login as Admin and you can correct.

Feel free to continue asking and be sure to use pencil and paper to register the changes you made. Any developments in you goal toward your use of ACL, might be great additional to make notes for other users about the ACL in the WIKI pages. There are not many specialists for ACL in these OpenEMR Forums and I am not a specialist, but have “some” experience.

svkrishna wrote on Saturday, March 22, 2014:

Thank you one again for the suggestion Pieter. I could create the test group and experiment with it, but again I don’t understand where can I allow/deny access to a particular form (LBV form that I created) in ACL? All I see is administration-> forms administration and can set access to ALL the forms. One I set the access to deny , the user couldnot even see the patient demographics section, but could see only the list of patients.
Please do advice. Thanks again!

blankev wrote on Saturday, March 22, 2014:

Well may be I did let you try something that does not give the option to allow/disallow certain documents.

Probably this can not be done.

My other suggestion based on two facilities was that the Front desk personnel could have access to all document of that Facility and the Doctors do not have that right.

Just change the allow deny functionality from doctors to nurses and vice versa in the second Facility. And only make a copy of the Demographics into the second facility.

As far I know OpenEMR, there is no option to create a permission for certain User groups for only specific documents. It is a all or nothing situation.

Using the Ship example of the ACL manual it would create a situation that certain chairs are available for certain persons and chairs of specific color are not available.

svkrishna wrote on Saturday, March 22, 2014:

Than you Soo much Pieter! I will go ahead a give the access to demographics and appointments to the front desk and access of encounter forms to the clinicians and doctors and see if I can get the work done :slight_smile: