Recently one of my clients asked for the ability to create a provider event that front office staff could not delete. I have looked around for a while now and can not seem to find a way to do this. If any of you know how I would go about this I would appreciate it greatly. I don’t mind coding something of you could let me know how you handle user access control in OpenEMR.
This can be accomplished by controlling the access rights of the front office staff who logs in.
Go to “Administrator-> ACL” under “Groups and access Control->Front Office-write” you can define the items that front office can access under “Active” section and others(items they should not access) under “Inactive” section.
Hope This Helps.
Thanks,
Your OpenEMR Customization/Support provider,
ViSolve,Inc services@visolve.com
Thanks for your reply. I looked into the ACL for front office staff, but I can not seem to find a way to allow them to delete patient appointments, but to not be able to delete provider appointments/events. I can only turn all appointment deletion off. How would I make it so the Front Office cannot delete Provider Events?
I have the same problem in my office. In order for my staff to be able to do basic things they need to do, like correct an error that they made in entering a patient weight, I have to give them the ability to delete things they shouldn’t be able to delete. Can we make ACL more nuanced?
ACL has a huge amount of room to grow. Developers can add/expand/modify ACO/ACL’s and integrate them into the code(including the official codebase), which is discussed here: http://www.open-emr.org/wiki/index.php/PhpGacl