Permissions¶
Overview¶
Patients are individuals receiving healthcare services through the VitalBridge platform.
The Patient role is designed to provide secure access to healthcare services while ensuring strict privacy and resource ownership controls.
Patients may access only their own resources and information.
Permission Scope¶
flowchart TB
PATIENT["Patient"]
PROFILE["Own Profile"]
APPOINTMENTS["Own Appointments"]
CONSULTATIONS["Own Consultations"]
PATIENT --> PROFILE
PATIENT --> APPOINTMENTS
PATIENT --> CONSULTATIONS
Hold "Alt" / "Option" to enable pan & zoom
Resource Access Matrix¶
| Resource | Permission |
|---|---|
| Own Profile | Read / Update |
| Other Patient Profiles | No Access |
| Own Appointments | Full Access |
| Other Patient Appointments | No Access |
| Own Consultations | Participate |
| Other Consultations | No Access |
| Provider Profiles | Read Only |
| Provider Schedules | Read Only |
| Tenant Administration | No Access |
| Platform Administration | No Access |
Appointment Permissions¶
Patients may:
- View appointments
- Book appointments
- Cancel appointments
- Reschedule appointments
- Join consultations
flowchart LR
PATIENT["Patient"]
APPT["Appointment"]
PATIENT --> APPT
Hold "Alt" / "Option" to enable pan & zoom
Consultation Permissions¶
Patients may:
- Join scheduled consultations
- Participate in video consultations
- Leave consultations
flowchart LR
PATIENT["Patient"]
VIDEO["Video Session"]
PATIENT --> VIDEO
Hold "Alt" / "Option" to enable pan & zoom
Profile Permissions¶
Patients may:
- View profile information
- Update permitted profile fields
- Manage contact information
Patients may not:
- Modify administrative records
- Modify tenant information
Restricted Operations¶
Patients cannot:
- Create providers
- Manage providers
- Register other patients
- Access administrative settings
- View other patient information
- Access platform configuration
Security Principles¶
The Patient role follows:
- Resource ownership
- Privacy protection
- Tenant isolation
- Least privilege