2013-06-20 Raxa GSoC Meeting

2013-06-20 Raxa GSoC Meeting

Participants: @Surajit Nundy @Piyush Madan (Unlicensed) @John V Stoecker (Unlicensed) @Akhil Ravindran (Unlicensed) @Neeti Pokharna (Unlicensed) @Tahar Zano (Unlicensed) @Harsh Chhabra (Unlicensed) @Atul Agrawal (Unlicensed) 

 

Schedule:

  • Project Updates

  • REST module walkthrough

  • Discussion on security model

 

1. Updates on all projects

Radiology

-deploying images on DICOM task is complete

-documenting DICOM and OpenMRS

Reporting

-working on webapp

-controller + processor + renderer to process the reports and show them

-done with java and jsp code for demo report

Timeline

-working on design

-sketching mockups

2. REST demo

-search a patient

To see how to search a patient, install Firefox REST client. Add these headers:

Basic Authentication, with your account's username + password

Content-type: application/json

Accept: application/json

and do a GET call on this url: http://raxaemrtest.elasticbeanstalk.com/ws/rest/v1/patient?q=john

-search a patient full (more info)

do a GET call on this url: http://raxaemrtest.elasticbeanstalk.com/ws/rest/v1/patient?q=john&v=full

-get all encounters for a patient

http://raxaemrtest.elasticbeanstalk.com/ws/rest/v1/order?patient=65ea509b-1f90-461f-9879-62004cc8a3b6

(note that any patient uuid will work here, as long as your account has access

3. Raxacore security model

-There are 3 different ways to access information

--if the info is your own, you have access

--if you are an admin, you have acces

--if you can access through a security group

A security group is basically a mapping between 2 people. Security groups have <accessors> and <persons>. To test whether person A has access to person B's information, do an intersection:

get all security groups where person A is in <accessors>, and person B is in <persons>. If this number is greater than 0, we know they have access.