Medplum is the fasted way to build high quality, scalable and compliant healthcare applications

medplum

Is there any way to make a resource `readonly` for an access policy but allow a specific subset of fields to be writeable, instead of the other way around (default writable but a protected list of readonly fields)?

Hi <@1126259077966725169> , right now there isn't a clean way to do this. You would have to list all the fields individually

Would you mind sharing your use case? As we iterate on our AccessPolicy implmentation, we could consider an allow-list of writeable fields

I'm basically creating a role that does not have the ability to change any details on a `ServiceRequest` except for the capability to upload new files pertaining to the service request, or change certain info about who sent the service request, and when it was received (which is implemented as a note on our resource).

This would be a pretty reasonable feature for us to add to our AccessPolicies. I've filed a ticket here: https://github.com/medplum/medplum/issues/2548

It would probably make sense to incorporate this as part of a broader iteration on our AccessPolicy