== Access Control for the HMS Module ==

this testing has been done on security level=7
To begin with two hospitals that have been hypothetically created . The first hospital is Sarvodya Hospital and the second hospital is Sarvodya Hospital. The Admins of hospitals and staff have been alloted their roles. [[BR]]


**Special priviliges of Eden admin **[[BR]]

The Admin can edit user roles , disable users , and can edit user profiles and it can do all the other work as a hospital admin can do additionally he can do it for all the hospitals uunlike for a specific hospital as done by the hospital admin .[[BR]]

**Sarvodya Hospital Admin**[[BR]]

Add hospitals - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - Yes[[BR]]

Edit hospital - Yes[[BR]]

List all hospitals (only his own hospital) - Yes[[BR]]


**Sarvodya Hospital Staff**[[BR]]

New hospital - Yes[[BR]]

List all hospitals - (only his own hospi) - Yes[[BR]]

Search hospitals - Yes[[BR]]

Delete hospital - No[[BR]]

Edit hospital - No[[BR]]

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory .[[BR]]


**Mahavir Hospital Admin**[[BR]]

Add hospital - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - Yes[[BR]]

List all hospitals - (only his own hospital) - Yes[[BR]]


**Mahavir Hospital Staff**[[BR]]

New hospital - Yes[[BR]]

List all hospitals(only his own hospital) - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - No[[BR]]

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory.[[BR]]


**Logged in normal user**[[BR]]

Create a hospital - Yes[[BR]]

Edit a hospital (Only the Hospital added by him ) - Yes[[BR]]

List all hospital (Only the Hospital added by him ) - Yes [[BR]]

Delete the hospital - No[[BR]]


**Non Logged in User**[[BR]]

Add a hospital - No[[BR]]

Delete a hospitals - No[[BR]]

List all hospitals -No[[BR]]

Search hospital - No [[BR]]