feature: RBAC + Clinical Audit Logging

2026-06-21 15:46:55 +08:00
parent a43db52813
commit 5af6ab490e
83 changed files with 4281 additions and 70 deletions
@@ -0,0 +1,63 @@
+public static class ClinicalRolePermissionMap
+{
+    private static readonly Dictionary<ClinicalRole, HashSet<string>> _map = new()
+    {
+        [ClinicalRole.Nurse] = new(StringComparer.Ordinal)
+        {
+            ClinicalPermissions.PatientsRead,
+            ClinicalPermissions.EncountersRead,
+            ClinicalPermissions.ObservationsIngest,
+            ClinicalPermissions.AlertsRead,
+            ClinicalPermissions.AlertsAcknowledge,
+            ClinicalPermissions.AlertsResolve,
+            ClinicalPermissions.ThresholdsRead,
+            ClinicalPermissions.AnalyticsRead,
+            ClinicalPermissions.OrdersWrite,
+            ClinicalPermissions.MedicationsWrite,
+        },
+        [ClinicalRole.Physician] = new(StringComparer.Ordinal)
+        {
+            ClinicalPermissions.PatientsRead,
+            ClinicalPermissions.EncountersRead,
+            ClinicalPermissions.EncountersWrite,
+            ClinicalPermissions.ObservationsIngest,
+            ClinicalPermissions.AlertsRead,
+            ClinicalPermissions.AlertsAcknowledge,
+            ClinicalPermissions.AlertsResolve,
+            ClinicalPermissions.ThresholdsRead,
+            ClinicalPermissions.AnalyticsRead,
+            ClinicalPermissions.OrdersWrite,
+            ClinicalPermissions.MedicationsWrite,
+        },
+        [ClinicalRole.Admin] = new(StringComparer.Ordinal)
+        {
+            ClinicalPermissions.PatientsRead,
+            ClinicalPermissions.PatientsWrite,
+            ClinicalPermissions.EncountersRead,
+            ClinicalPermissions.EncountersWrite,
+            ClinicalPermissions.ObservationsIngest,
+            ClinicalPermissions.AlertsRead,
+            ClinicalPermissions.AlertsAcknowledge,
+            ClinicalPermissions.AlertsResolve,
+            ClinicalPermissions.ThresholdsRead,
+            ClinicalPermissions.ThresholdsWrite,
+            ClinicalPermissions.AnalyticsRead,
+            ClinicalPermissions.OrdersWrite,
+            ClinicalPermissions.MedicationsWrite,
+            ClinicalPermissions.FhirIngest,
+            ClinicalPermissions.AuditRead,
+            ClinicalPermissions.UsersAdmin,
+        },
+        [ClinicalRole.Integration] = new(StringComparer.Ordinal)
+        {
+            ClinicalPermissions.PatientsWrite,
+            ClinicalPermissions.EncountersWrite,
+            ClinicalPermissions.ObservationsIngest,
+            ClinicalPermissions.MedicationsWrite,
+            ClinicalPermissions.FhirIngest,
+        },
+    };
+
+    public static bool HasPermission(ClinicalRole role, string permission) =>
+        _map.TryGetValue(role, out var perms) && perms.Contains(permission);
+}