Package ca.uhn.fhir.rest.server.interceptor.consent

Class RuleFilteringConsentService

java.lang.Object

ca.uhn.fhir.rest.server.interceptor.consent.RuleFilteringConsentService

All Implemented Interfaces:

IConsentService

public class RuleFilteringConsentService
extends Object
implements IConsentService

Implement rule based search result filtering as a ConsentService. We have new rules that add fhir-query filters. We can't always merge these into the queries, this IConsentService removes bundle results that don't pass the filters. Otherwise, the final bundle result rule check will fail with a 403 on disallowed resources.

Field Summary

Fields

Modifier and Type	Field	Description
protected final IRuleApplier	myRuleApplier	Our delegate for consent verdicts

Constructor Summary

Constructors

Constructor	Description
RuleFilteringConsentService(IRuleApplier theRuleApplier)

Method Summary

Modifier and Type	Method	Description
ConsentOutcome	canSeeResource(RequestDetails theRequestDetails, org.hl7.fhir.instance.model.api.IBaseResource theResource, IConsentContextServices theContextServices)	Apply the rules active in our rule-applier, and drop resources that don't pass.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface ca.uhn.fhir.rest.server.interceptor.consent.IConsentService

completeOperationFailure, completeOperationSuccess, shouldProcessCanSeeResource, startOperation, willSeeResource

Field Details

myRuleApplier

protected final IRuleApplier myRuleApplier

Our delegate for consent verdicts

Constructor Details

RuleFilteringConsentService

public RuleFilteringConsentService(IRuleApplier theRuleApplier)

Method Details

canSeeResource

public ConsentOutcome canSeeResource(RequestDetails theRequestDetails,
 org.hl7.fhir.instance.model.api.IBaseResource theResource,
 IConsentContextServices theContextServices)

Apply the rules active in our rule-applier, and drop resources that don't pass.

Specified by:

canSeeResource in interface IConsentService

Parameters:

theRequestDetails - The current request.

theResource - The resource that will be exposed

theContextServices - Unused.

Returns:

REJECT if the rules don't ALLOW, PROCEED otherwise.