== Access Control for the HMS Module ==

This testing has been done on security level=7[[BR]]

To begin with two hospitals that have been hypothetically created . The first hospital is Sarvodya Hospital and the second hospital is mahavir Hospital. The Admins of hospitals and staff have been alloted their roles.Their roles were assigned by the Administrator,  by using the administration tab and then clicking on Users and then allotting them the specific roles [[BR]]


**Special priviliges of Eden admin **[[BR]]

The Admin can edit user roles , disable users , and can edit user profiles and it can do all the other work as a hospital admin can do additionally he can do it for all the hospitals uunlike for a specific hospital as done by the hospital admin .[[BR]]

**Sarvodya Hospital Admin**[[BR]]

Add hospitals - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - Yes[[BR]]

Edit hospital - Yes[[BR]]

List all hospitals (only his own hospital) - Yes[[BR]]

Can Edit the Status report when editing the hospital and fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory.[[BR]]


**Sarvodya Hospital Staff**[[BR]]

New hospital - Yes[[BR]]

List all hospitals - (only his own hospi) - Yes[[BR]]

Search hospitals - Yes[[BR]]

Delete hospital - No[[BR]]

Edit hospital - No[[BR]]

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory .[[BR]]


**Mahavir Hospital Admin**[[BR]]

Add hospital - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - Yes[[BR]]

List all hospitals - (only his own hospital) - Yes[[BR]]

Can Edit the Status report when editing the hospital and fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory.[[BR]]


**Mahavir Hospital Staff**[[BR]]

New hospital - Yes[[BR]]

List all hospitals(only his own hospital) - Yes[[BR]]

Search hospital (only his own hospital)- Yes[[BR]]

Delete hospital - No[[BR]]

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory.[[BR]]


**Logged in normal user**[[BR]]

Create a hospital - Yes[[BR]]

Edit a hospital (Only the Hospital added by him ) - Yes[[BR]]

List all hospital (Only the Hospital added by him ) - Yes [[BR]]

Delete the hospital - No[[BR]]


**Non Logged in User**[[BR]]

Add a hospital - No[[BR]]

Delete a hospitals - No[[BR]]

List all hospitals -No[[BR]]

Search hospital - No [[BR]]