Issues/8029/modify nurse access to consultation page

[Sulochan-khadka]

Proposed Changes

• Fixes Modify non-admin users access to the patient consultation record #8029
• Change auth based access to consultation page

@ohcnetwork/care-fe-code-reviewers

Merge Checklist

• Add specs that demonstrate bug / test a new feature.
• Update product documentation.
• Ensure that UI text is kept in I18n files.
• Prep screenshot or demo video for changelog entry, and attach it to issue.
• Request for Peer Reviews
• Completion of QA

[netlify]

✅ Deploy Preview for care-ohc ready!

Name	Link
🔨 Latest commit	1962290
🔍 Latest deploy log	https://app.netlify.com/sites/care-ohc/deploys/670991e55598b00008f20564
😎 Deploy Preview	https://deploy-preview-8727--care-ohc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[nihal467]

• buttons are disabled for the consultation card to which the users have access to, which is not the expected behavior, they should be allowed to access it, check the comment and issues once again @Sulochan-khadka

[Sulochan-khadka]

• buttons are disabled for the consultation card to which the users have access to, which is not the expected behavior, they should be allowed to access it, check the comment and issues once again @Sulochan-khadka

Apologies for the incorrect changes.
The issue is not very clear , which is why i asked there but was no reply, therefore i went ahead and implemented whatever i understood. It would be great of you if you kindly provide the steps to reproduce the issue.

[nihal467]

• Any non-admin users, should be able to access only the consultation card from facility there are linked, if the patient has any consultation history from facility where they are not linked, then the button on that particular card should be disabled

step 1: Admit Patient A to Facility A, then discharge them from Facility A. Repeat this process for Facility B and Facility C.
Step 2: After these admissions and discharges, Patient A will have a consultation history from Facilities A, B, and C.
Step 3: Log in with a nurse's user ID that is linked only to Facilities A and B.
Step 4: Now re-admit Patient A to one of the facilities (either A or B) where the nurse is linked.
Step 5: Access Patient A’s consultation history. In the consultation cards, the button in the consultation card related to Facility C should be disabled, as the nurse is not linked to Facility C.

[Sulochan-khadka]

• Any non-admin users, should be able to access only the consultation card from facility there are linked, if the patient has any consultation history from facility where they are not linked, then the button on that particular card should be disabled

step 1: Admit Patient A to Facility A, then discharge them from Facility A. Repeat this process for Facility B and Facility C. Step 2: After these admissions and discharges, Patient A will have a consultation history from Facilities A, B, and C. Step 3: Log in with a nurse's user ID that is linked only to Facilities A and B. Step 4: Now re-admit Patient A to one of the facilities (either A or B) where the nurse is linked. Step 5: Access Patient A’s consultation history. In the consultation cards, the button in the consultation card related to Facility C should be disabled, as the nurse is not linked to Facility C.

Thankyou very much for the much needed explaination. I have made some changes, kindly review them. And let me know in case of modifications.

[nihal467]

@Sulochan-khadka

• Now, the district admin itself is blocked from accessing the button in consultation card, before requesting another review, make sure admins (district and state admin) have no restriction at all and non-admins (doctor, nurse, all other users) have restrictions are per issue

[Sulochan-khadka]

@Sulochan-khadka

• Now, the district admin itself is blocked from accessing the button in consultation card, before requesting another review, make sure admins (district and state admin) have no restriction at all and non-admins (doctor, nurse, all other users) have restrictions are per issue

The logic seems pretty convincing that the consultation facilities are checked whether it matches with the allowed facilities of the user.

However, the problem you stated occurs when the facility is no more linked with the district admin and i think that is correct since it may happen that some facilities get linked to different district admins and therefore, the previous admin should not have the access to it. Right?!

Also "View / Upload Consultation Files" should also have same added condition right? That if the user is not allowed a facility, it should not be able to interact with the consultation records. Right?!