How to create an access policy where the user can ...
# supportn
noclip
04/03/2025, 10:32 PMI'm trying to create an access policy where the user can only create appointsments and further more they have to be an actor in them. I'm trying to use FHIR expressions but not getting any luck
{
"resourceType": "Appointment",
"writeConstraint": [
{
"language": "text/fhirpath",
"expression": "%before.exists().not() implies %profile in participant.actor"
}
]
},
Any ideas?
noclip
04/03/2025, 10:33 PMhave also tried this
{
"resourceType": "Appointment",
"writeConstraint": [
{
"language": "text/fhirpath",
"expression": "%before.exists().not() and participant.actor.reference.contains(%profile)"
}
]
}
am I allowe to use %profile here? Any place I can find more advanced examples?
noclip
04/03/2025, 10:47 PMokay seems like %profile.id and %profile both work fine.
{
"resourceType": "Appointment",
"writeConstraint": [
{
"language": "text/fhirpath",
"expression": "%before.exists().not() and %profile in %after.participant.actor.reference"
}
]
},
but now I'm getting Forbidden with this. Trying to make an appointment. %after.participant is an array, maybe that's why?
r
rahul1
04/10/2025, 6:06 PMhi @noclip thanks for the question. We haven't had a chance to repro this, but at first glance I don't see anything obviously wrong with your approach
254 Views