Locking Down Admin Rights

mike-h30 wrote on Wednesday, December 26, 2007:

After some minor bumps I finally have OpenEMR-2.8.3 installed and I am currently taking it for a test drive.  I noticed that any authorized user has access to the administration tab, more so the "database" section.  Is this dangerous? While authorized users can be physicians or nurses, should they have access to PHP MyAdmin where they could potentially do some damage?  Why is there not one true system admin seperate from physicians or medical personnel? Or am I missing something?

Regards,

-Mike

bradymiller wrote on Thursday, December 27, 2007:

hey,

   OpenEMR supports access controls with php-GACL( http://phpgacl.sourceforge.net/ ), which gives fine grained access control. Clear installation instructions for php-GACL with OpenEMR can be found in the wiki at http://www.oemr.org/modules/wiwimod/ . Instructions on using php-GACL can be found at http://www.sunsetsystems.com/node/19 . In the 2.8.3 version of OpenEMR, php-GACL administration needs to be done in php-GACL, which is rather cumbersome. However, we have integrated php-GACL administration into OpenEMR in the current CVS version(still some bugs, but if your curious, check out this link for more details http://sourceforge.net/forum/forum.php?thread_id=1844870&forum_id=202506 ).

   Also, some other documentation/scripts in OpenEMR that discuss/describe php-GACL include:
/openemr/Documentation/README.phpgacl
/openemr/INSTALL
/openemr/library/acl.inc
/openemr/acl_setup.php
/openemr/acl_upgrade.php

-Brady

mike-h30 wrote on Thursday, January 24, 2008:

Thank you! 

-Mike

ramkar1986 wrote on Thursday, January 24, 2013:

I’m trying to add a new category as like as patient in the OpenEMR I need to give access rights to view that category
How to edit changes in GACL I’m trying to do it is not giving any change in the category

I also need to give read/write access to the category

Please reply me for the same

visolveemr wrote on Friday, January 25, 2013:

Hi Ramkar,

For your  requirement,  you need to add a new "category " in the file “/openemr/acl_setup.php”

For this you need to create “Major section” and and an Object for that section.

Then u can go the category page what you created (like patient) and there need to check the ACL.(code level check).

Then in the acl_upgrade.php , u need to create the object in the sections 1. Add new object Sections 2. Add new Objects 3. Update the ACLs . Once u done the entry, run the acl_upgrade.php to make affect the changes.

Now In Admin -> ACL , you can see the category created and you can assign to this to any groups.

Hope this helps.

Ranjith
www.visolve.com

ramkar1986 wrote on Friday, January 25, 2013:

Thanks Ranjith,
                           
                           Thanks for your guidance it worked!!!!!!!!!!!!!!!!

ramkar1986 wrote on Saturday, January 26, 2013:

Hi
                     I’m trying to add new clinics (I need to show the specific clinics patients to specified clinician)for eg: if I’m creating RR clinic and JJ clinic It has 10 doctors for each clinics and many patients for each clinics I will specify the patient for a specific clinic then it if I,m logging as a doctor of RR clinic then it must show RR clinic patients only.
How can I restrict that I had tried by using facility in openEMR but it is not working it is showing all patients to every user of every clinic

Please find me the solution.

regards,
Ramesh Karthikeyan

visolveemr wrote on Saturday, January 26, 2013:

Hi Ramesh,

We are only helping you to get the solution.

We can able to make provider to be linked to only one facility to see only his/her patients in that facility.
For that ,
Enable Administration->Features->Restrict Users to Facilities and then set the facility in Administrion->Users

May be this helps to find the solution to You.

Another solution, U can use Multi site options for multiple clinics. This will simplify your work.

Thanks,
Ranjith
www.visolve.com

ramkar1986 wrote on Monday, January 28, 2013:

Hi ,

      I am trying to use facility based patients to be visible to the user.
When user is logging it will show the drop down list of the facility they will select the facility It must show the certain facility’s related patients (for eg: I am selecting the facility Lee Clinic it must show the Lee Clinic patients only other patients must not be visible to me How is it possible please guide me for the same as soon as possible

regards,
RAMESH.K

visolveemr wrote on Tuesday, January 29, 2013:

Hi Ramesh,

As of now, This Feature (‘Restrict Patients to Facilities’ ) is not available in the openEMR.

We are trying to implement the same. (if anyone already done this, share your views here).

BTW, You can use Different instance for different facilities.

Thanks,
Ranjith
www.visolve.com