FHIR Cross-Version Extensions package for FHIR R4 from FHIR R5 - Version 0.0.1-snapshot-2. See the Directory of published versions
Official URL: http://hl7.org/fhir/5.0/ValueSet/R5-permission-rule-combining-for-R4 | Version: 0.0.1-snapshot-2 | |||
Standards status: Informative | Maturity Level: 0 | Responsible: Security | Computable Name: R5_permission_rule_combining_for_R4 |
This cross-version ValueSet represents concepts from http://hl7.org/fhir/ValueSet/permission-rule-combining | 5.0.0 for use in FHIR R4. Concepts not present here have direct equivalent mappings crossing all versions from R5 to R4. |
References
http://hl7.org/fhir/permission-rule-combining
version 5.0.0
Code | Display | Definition |
deny-overrides | Deny-overrides | The deny overrides combining algorithm is intended for those cases where a deny decision should have priority over a permit decision. |
permit-overrides | Permit-overrides | The permit overrides combining algorithm is intended for those cases where a permit decision should have priority over a deny decision. |
ordered-deny-overrides | Ordered-deny-overrides | The behavior of this algorithm is identical to that of the “Deny-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission. |
ordered-permit-overrides | Ordered-permit-overrides | The behavior of this algorithm is identical to that of the “Permit-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission. |
deny-unless-permit | Deny-unless-permit | The “Deny-unless-permit” combining algorithm is intended for those cases where a permit decision should have priority over a deny decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. |
permit-unless-deny | Permit-unless-deny | The “Permit-unless-deny” combining algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. This algorithm has the following behavior. |
This value set expansion contains 6 concepts.
Code | System | Display | Definition |
deny-overrides | http://hl7.org/fhir/permission-rule-combining | Deny-overrides | The deny overrides combining algorithm is intended for those cases where a deny decision should have priority over a permit decision. |
permit-overrides | http://hl7.org/fhir/permission-rule-combining | Permit-overrides | The permit overrides combining algorithm is intended for those cases where a permit decision should have priority over a deny decision. |
ordered-deny-overrides | http://hl7.org/fhir/permission-rule-combining | Ordered-deny-overrides | The behavior of this algorithm is identical to that of the “Deny-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission. |
ordered-permit-overrides | http://hl7.org/fhir/permission-rule-combining | Ordered-permit-overrides | The behavior of this algorithm is identical to that of the “Permit-overrides” rule-combining algorithm with one exception. The order in which the collection of rules is evaluated SHALL match the order as listed in the permission. |
deny-unless-permit | http://hl7.org/fhir/permission-rule-combining | Deny-unless-permit | The “Deny-unless-permit” combining algorithm is intended for those cases where a permit decision should have priority over a deny decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. |
permit-unless-deny | http://hl7.org/fhir/permission-rule-combining | Permit-unless-deny | The “Permit-unless-deny” combining algorithm is intended for those cases where a deny decision should have priority over a permit decision, and an “Indeterminate” or “NotApplicable” must never be the result. It is particularly useful at the top level in a policy structure to ensure that a PDP will always return a definite “Permit” or “Deny” result. This algorithm has the following behavior. |
Explanation of the columns that may appear on this page:
Level | A few code lists that FHIR defines are hierarchical - each code is assigned a level. In this scheme, some codes are under other codes, and imply that the code they are under also applies |
System | The source of the definition of the code (when the value set draws in codes defined elsewhere) |
Code | The code (used as the code in the resource instance) |
Display | The display (used in the display element of a Coding). If there is no display, implementers should not simply display the code, but map the concept into their application |
Definition | An explanation of the meaning of the concept |
Comments | Additional notes about how to use the code |