Access Control for the HMS Module

this testing has been done on security level=7

To begin with two hospitals that have been hypothetically created . The first hospital is Sarvodya Hospital and the second hospital is mahavir Hospital. The Admins of hospitals and staff have been alloted their roles.

Special priviliges of Eden admin

The Admin can edit user roles , disable users , and can edit user profiles and it can do all the other work as a hospital admin can do additionally he can do it for all the hospitals uunlike for a specific hospital as done by the hospital admin .

Sarvodya Hospital Admin

Add hospitals - Yes

Search hospital (only his own hospital)- Yes

Delete hospital - Yes

Edit hospital - Yes

List all hospitals (only his own hospital) - Yes

Sarvodya Hospital Staff

New hospital - Yes

List all hospitals - (only his own hospi) - Yes

Search hospitals - Yes

Delete hospital - No

Edit hospital - No

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory .

Mahavir Hospital Admin

Add hospital - Yes

Search hospital (only his own hospital)- Yes

Delete hospital - Yes

List all hospitals - (only his own hospital) - Yes

Mahavir Hospital Staff

New hospital - Yes

List all hospitals(only his own hospital) - Yes

Search hospital (only his own hospital)- Yes

Delete hospital - No

Cannot Edit the Status report when editing the hospital but can edit fields under Services , Contacts , Bed Capacity , Cholera Treatment Capablity , Activity report , Images , Staff Requests , Match Requests , Commit and +Inventory.

Logged in normal user

Create a hospital - Yes

Edit a hospital (Only the Hospital added by him ) - Yes

List all hospital (Only the Hospital added by him ) - Yes

Delete the hospital - No

Non Logged in User

Add a hospital - No

Delete a hospitals - No

List all hospitals -No

Search hospital - No