MENU
A hospital uses a case type to manage the treatment of patients visiting the Emergency Room (ER). Cases are created when the patient checks in at the registration desk, and are resolved when the patient is released from the hospital. Stakeholders identify the following security requirements for the case type.
Patients access cases on a read-only basis.
Patients can only access their own cases.
Doctors and nurses can modify cases throughout the case life cycle.
Only doctors are allowed to write prescriptions.
What two steps, when performed together, allow you to ensure that patients can read, but not edit, cases? (Choose Two)
To ensure that patients can read but not edit cases in the hospital's ER case management system, two steps need to be taken. First, configure an Access Role to Object rule with the open case action set to 1 (B), which grants read-only access. This ensures that patients can view their cases without the ability to make any modifications. Secondly, create an access group unique to patients (D). This access group would include the Access Role to Object rule configured in the previous step. By associating patients with this access group, it ensures that they are granted the appropriate level of access to their cases, fulfilling the security requirements specified by the stakeholders. Reference: Pega Community documentation on Access of Role to Object and access groups.
Currently there are no comments in this discussion, be the first to comment!